Drop guarddog from uphold supply-chain

.pre-commit-hooks.yaml

@@ -150,8 +150,8 @@
   pass_filenames: false
   always_run: true
 
-# Six external scanners, one verdict. The scanners are NOT built by this
-# hook -- osv-scanner, zizmor, cargo-deny, cargo-vet, guarddog and gitleaks
+# Five external scanners and a git-pin check, one verdict. The scanners are NOT built by this
+# hook -- osv-scanner, zizmor, cargo-deny, cargo-vet and gitleaks
 # come from the host's own toolchain, and one that is missing is exit 2, never
 # a pass. gitleaks runs only where the policy inherits the `credentials` set,
 # and only at the version this uphold pins.
@@ -169,7 +169,7 @@
 # passes the files in the push, and the range is not one of them.
 - id: uphold-supply-chain
   name: uphold supply-chain
-  description: origin, advisories, typosquats, workflow security and committed secrets over the pushed range -- six scanners, one verdict
+  description: origin, advisories, workflow security, git pins and committed secrets over the pushed range -- five scanners and a git-pin check, one verdict
   entry: uphold supply-chain
   language: rust
   stages: [pre-push]
@@ -189,7 +189,7 @@
 # is the pair this was split into.
 - id: uphold-supply-chain-all
   name: uphold supply-chain --all
-  description: the same six scanners over every manifest in the tree and every commit, for CI and scheduled runs
+  description: the same checks over every manifest in the tree and every commit, for CI and scheduled runs
   entry: uphold supply-chain
   args: ["--all"]
   language: rust

Cargo.toml

@@ -112,11 +112,6 @@ tree-sitter-go = "0.25"
 # positional word after them. Where this reader and git's `split_cmdline`
 # disagree, `expand_alias` says which case and how it is closed.
 shell-words = "1"
-# The exact-release PyPI metadata used to verify optional extras, with bounded
-# HTTPS requests and no asynchronous runtime.
-ureq = { version = "3.4.2", default-features = false, features = ["rustls"] }
-# Parse PEP 508 requirements before accepting the closed optional-extra form.
-pyreq = "0.2.0"
 # JUnit XML, for `UPHOLD_JUNIT`: the evidence format the gate tier already
 # writes, publishes and links, so a guard run is read by the same publisher with
 # nothing of uphold's own to parse. A library rather than a hand-rolled writer