ci: correct runtime production baseline dependency pin

[jearonwong]

Summary

• Correct the Runtime Production Baseline sibling dependency pin for Cognitive_OS.
• Keep the workflow pinned to an immutable commit, not a floating branch.
• Preserve the Runtime Production Baseline purpose: install sibling Cognitive_OS, install SoloCrew, run repo-wide typecheck, then run tests.
• Do not change SoloCrew product/runtime source.

Root Cause

• SoloCrew main and SoloCrew PR chore: prepare final Codex ops foundation PR #2 both fail the current workflow-pinned CI-like baseline at typecheck.
• The failing workflow pins Cognitive_OS to e725897b29f000be949f9371a2cb3549d298c222.
• That Cognitive_OS ref lacks public DTO subpaths currently imported by SoloCrew.
• Classification: PRE_EXISTING_CI_BASELINE_DEPENDENCY_PIN_BLOCKER.

Ref Changes

• Old Cognitive_OS ref: e725897b29f000be949f9371a2cb3549d298c222.
• New Cognitive_OS ref: 1295e7790784ca8e5d631c2553abbaa6ccae1fbe.
• Old MPLP-Protocol ref: 214939ab6ba522036d376868d1fe8d04d960420f.
• New MPLP-Protocol ref: unchanged, 214939ab6ba522036d376868d1fe8d04d960420f.

Missing DTO Subpaths Fixed

• cognitive_os/runtime/public/human-confirmed-action-preparation-dto
• cognitive_os/runtime/public/personal-mvp-runtime-backbone-dto
• cognitive_os/runtime/public/operator-work-packet-handoff-dto
• cognitive_os/runtime/public/operator-work-packet-handoff-bundle
• cognitive_os/runtime/public/memory-continuity-review-dto

Candidate Ref Evidence

• Old Cognitive_OS ref lacks all five required DTO files.
• New Cognitive_OS ref contains all five required DTO files.
• Cognitive_OS at 1295e7790784ca8e5d631c2553abbaa6ccae1fbe passed npm run test:runtime locally: 341/341 passing.
• No evidence showed the pinned MPLP-Protocol ref caused the typecheck failure, so it was left unchanged.

Proof That Old Pin Was Stale

• CI-like reproduction using SoloCrew PR chore: prepare final Codex ops foundation PR #2 head plus the old pinned sibling refs failed at npm run typecheck -- --pretty false.
• CI-like reproduction using SoloCrew main plus the old pinned sibling refs failed with the same missing DTO errors.
• Therefore the blocker is pre-existing baseline dependency drift, not Codex ops PR chore: prepare final Codex ops foundation PR #2 behavior.

Verification

• git diff --check HEAD~1 HEAD: PASS.
• git diff --check origin/main...HEAD: PASS.
• npm run typecheck -- --pretty false: PASS.
• npm run test: PASS, 2074/2074.
• CI-like clean three-repo reproduction:
  • SoloCrew correction branch checked out.
  • Cognitive_OS checked out at 1295e7790784ca8e5d631c2553abbaa6ccae1fbe.
  • MPLP-Protocol checked out at 214939ab6ba522036d376868d1fe8d04d960420f.
  • npm --prefix Cognitive_OS ci: PASS.
  • npm --prefix SoloCrew ci: PASS.
  • npm --prefix SoloCrew run typecheck -- --pretty false: PASS.
  • npm --prefix SoloCrew run test: PASS, 2074/2074.

Scope Boundaries

• Product/runtime behavior changed: NO.
• SoloCrew application source changed: NO.
• Cognitive_OS source changed: NO.
• MPLP-Protocol source changed: NO.
• Package versions changed: NO.
• CI was not weakened: typecheck and tests remain required.
• No floating branch ref was introduced.

Forbidden Actions Confirmation

No npm publish, npm deprecate, npm dist-tag mutation, PyPI upload, PyPI yank/delete, package version bump, schema intake, git tag, release seal, product/runtime behavior change, PR merge, or external registry mutation was performed.

Final Verdict

SOLOCREW_RUNTIME_BASELINE_PIN_CORRECTION_READY_FOR_REVIEW