backport improvements from hulpvraag

- tasks: fetch tags before bump, auto-push tag, add version() task
- tasks(service): pre=[ci] on build_image, :latest tag, interactive deploy prompt
- pyproject.toml: add ruff isort known-first-party section
- Dockerfile: add smoke-test import after install

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

{{cookiecutter.project_slug}}/Dockerfile

@@ -13,6 +13,7 @@ WORKDIR /app
 COPY --from=builder /app/requirements.txt /app/dist/*.whl ./
 RUN pip install --no-cache-dir -r requirements.txt \
     && pip install --no-cache-dir --no-deps *.whl \
+    && python -c "import {{ cookiecutter.package_name }}" \
     && rm -f *.whl requirements.txt
 USER 1000:1000
 ENTRYPOINT ["python", "-m", "{{ cookiecutter.package_name }}"]