CI: run pyright
Run pyright in strict mode with a very long list of rules that need to be ignored. The idea is to enable more rules over time.

pre-commit seamlessly installs pyright  (depends on node.js) but running pyright as part of the pre-commit slows the pre-commit down by ~85s.
