Pin TF-SDK 2.0.0rc4 for release testing

Pins the runtime SDK dependency to TF-SDK 2.0.0rc4 and refreshes its wheel/sdist URLs and hashes in uv.lock. Other resolved package versions remain unchanged.

Verified through the normal locked installation: 575 tests passed, with type, architecture, lint and format checks passing.

Targets the bootstrap integration branch to keep this diff limited to the dependency update. Merge there before its promotion to develop, or retarget to develop once the bootstrap changes are integrated. The SRM team owns the merge order.