Summary

• Added lockfile with exact collection versions at [plugins/collections/requirements.lock.yml]
• Enhanced [plugins/tools/generate_requirements_lock.py] to auto-fetch latest versions from Ansible Galaxy v3 when [requirements.yml] has no pins.

Why

• Keep [requirements.yml] unpinned for readability and generator stability.
• Ensure deterministic installs via pinned versions in the lockfile.
• Avoid empty lock generation when versions are omitted.

Locked collections

• community.docker 4.7.0
• community.general 11.2.1
• netbox.netbox 3.21.0
• community.proxmox 1.3.0
• opennebula.cloud 0.0.1
• ansible.posix 2.1.0
• ansible.windows 3.2.0

Validation

• Pre-commit generators and validators passed.
• YAML formatting and whitespace checks passed.