feat(pip): verify git & https access from pip container (Fixes #216)

fleet/tasks/done/001-full-suite-green.md.woodland-algol

@@ -0,0 +1,23 @@
+# 001: Full suite green
+
+Goal: the whole python unit suite passes, or every failure is triaged.
+
+Steps:
+1. Run `python3 -m unittest discover -s tests` from the repo root.
+2. For each failure/error: if caused by recent runtime/reconcile/watcher
+   changes, fix it (smallest correct fix + keep tests green). If
+   pre-existing/unrelated (e.g. CDP/network-dependent), leave the code
+   alone and note it.
+3. Re-run the affected suites until green.
+
+Done criteria: full discover run is green, or this file lists each
+remaining failure with evidence it is pre-existing (failing
+identity + why it is out of scope).
+
+Result notes (append below before moving to done/):
+
+- 2026-10-07, builder woodland-algol: `python3 -m unittest discover -s tests`
+  from repo root → Ran 1239 tests in 78.7s, OK. No failures/errors needing
+  triage (only noise: expected stderr lines, one skip, ResourceWarnings in
+  test_muse_session_bind / test_tmux_server_watchdog). No code changes made.
+  Full suite green.