feat(pip): verify git & https access from pip container (Fixes #216)

fleet/tasks/done/007-brief-sha.md.muse--runtime--roles

@@ -0,0 +1,18 @@
+# 007: Brief-sha audit (read-only)
+
+Goal: confirm briefed markers in state.json match current briefs.
+
+Steps:
+1. Read `fleet/state.json` and note the recorded brief sha markers.
+2. Recompute the sha of each file in `fleet/briefs/` the same way
+   the code does (see bin/runtime_reconcile.py).
+3. Report match or mismatch per brief. Change nothing.
+
+Done criteria: this file states per brief: match or mismatch
+(with expected vs actual sha on mismatch).
+
+Result notes (append below before moving to done/):
+
+- 2026-10-07, builder muse--runtime--roles (read-only, changed nothing):
+  roles.md: match (e6b6b770a1cf); operator.md: match (bb397a44671a).
+  Shas recomputed via runtime_reconcile.brief_sha(_read_brief()).