feat(pip): verify git & https access from pip container (Fixes #216)

fleet/tasks/done/004-briefs-drift.md.muse--runtime--roles

@@ -0,0 +1,20 @@
+# 004: Briefs vs manifest drift check
+
+Goal: fleet briefs match the agents manifest.
+
+Steps:
+1. Read `fleet/agents.json` and both files in `fleet/briefs/`.
+2. Report any drift: agents in the manifest without a brief, or
+   briefs for agents no longer in the manifest.
+3. Do not edit the manifest; if drift is found, just document it
+   precisely (agent name + which side is missing).
+
+Done criteria: this file states either "no drift" or lists each
+drift item with the agent name and missing side.
+
+Result notes (append below before moving to done/):
+
+- 2026-10-07, builder muse--runtime--roles: no drift. Manifest declares
+  2 agents (muse--runtime--operator → briefs/operator.md,
+  muse--runtime--roles → briefs/roles.md); both files exist in
+  fleet/briefs/ and no extra briefs are present. No manifest edit made.