feat(pip): verify git & https access from pip container (Fixes #216)

fleet/tasks/done/006-claim-audit.md.muse--runtime--roles

@@ -0,0 +1,23 @@
+# 006: Claim-protocol audit
+
+Goal: task queues are clean and no claim is stale.
+
+Steps:
+1. List `fleet/tasks/pending/`, `fleet/tasks/claimed/`, `fleet/tasks/done/`.
+2. For each file in `claimed/`: check heartbeat age (`stat`) and
+   whether the owner session (suffix after last dot) is live per
+   `box runtime list --socket /tmp/tmux-muse.sock --muse-only`.
+3. Do not move anything; just report.
+
+Done criteria: this file lists queue counts plus, per claimed
+file, heartbeat age and owner live/gone (or "claimed/ empty").
+
+Result notes (append below before moving to done/):
+
+- 2026-10-07, builder muse--runtime--roles (report only, moved nothing):
+  pending/ 0 files; claimed/ 1 file; done/ 7 files.
+  claimed/006-claim-audit.md.muse--runtime--roles: heartbeat fresh
+  (touched seconds before audit), owner muse--runtime--roles live
+  (%20, working). No stale claims.
+  Observation (out of scope): both panes show WATCHER ○ - again;
+  watchers started during 003/008 have lapsed.