fix: update Repowise pin to 0.38.0

[2233admin]

What changed

• bump the exact Repowise runtime/install pin from 0.36.0 to 0.38.0
• keep the toolchain manifest and installer declaration synchronized
• update installer drift/upgrade contract tests to exercise 0.38.0
• document the policy: runtime provider pins track the latest reviewed upstream release while remaining exact and reproducible

Why

PyPI currently publishes Repowise 0.38.0, but Code Intel v0.7.0-beta.6 still required 0.36.0. A machine already running the current Repowise release therefore failed bootstrap with version:repowise, even though the provider was healthy.

This keeps installation deterministic: the installer does not resolve a floating latest at runtime. New upstream releases still require a reviewed pin update.

Validation

• cargo fmt --all --check
• focused installer and toolchain tests: 17 passed
• declared pins and internalization contracts: 55 passed
• python tests/test_skill_package.py -v: 18 passed
• hardcoded path scan: OK (129 files)
• Sentrux session gate and rules: pass, no structural degradation
• repin: clean, zero substitutions

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4d1f1f8c-5c36-4f79-a248-8423c6536933

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[repowise-bot]

✅ Health of changed files: 9.2 (unchanged)

📋 At a glance
1 hotspot touched · 1 file with recent fix history. Scoped to crates.

✅ Health gate: passed

🔎 More signals (1)

🔥 Hotspot touched (1)

• .../tests/installer_version_gate.rs: 1 commits/90d, 1 dependents

---

📊 See the full report for this PR
_{Your repo map with this PR's blast radius lit up, every caller of the contracts it changes, and health before and after. No sign-in. · ⭐ Star Repowise · 📥 Install bot · Silence on a single PR with [skip repowise] in the title · Per-repo toggle on repowise.dev/settings?tab=bot · Updated 2026-08-06 14:38 UTC}

[github-actions]

Code Intel change risk

Score	Percentile	Level
55/100	37th (vs last 49 commits)	🟢 low

Top signals

• Diff shape: 4 file(s), +23/-19 (max file share 0.71)
• Test asymmetry: source changed, tests touched
• Bug-magnet: 20 fix commit(s) in touched files (180d)
• Churn: 54 commit(s) touching these files (90d)

_{revspec: origin/main..HEAD · threshold: percentile >= 90 blocks unless labeled risk-accepted · code-intel change risk}