feat(pip): verify git & https access from pip container (Fixes #216)

fleet/tasks/done/009-watcher-logs.md.muse--runtime--roles

@@ -0,0 +1,20 @@
+# 009: Watcher log spot-check
+
+Goal: no approval prompt is stuck or held.
+
+Steps:
+1. Run `box muse-choices logs` (and `box muse-choices status`).
+2. Record the most recent entries per pane: answered vs held/failed.
+3. If a prompt is held, do not resolve it yourself; just report
+   the pane and prompt text precisely.
+
+Done criteria: result notes below state per pane: log tail
+outcome (all answered, or held item details).
+
+Result notes (append below before moving to done/):
+
+- 2026-10-07, builder muse--runtime--roles: `box muse-choices status` →
+  auto-answers ON, no answers recorded in audit feed. Per-pane logs
+  (logs requires --socket/--pane flags): %20 tail = heartbeat-only,
+  answers 0, pending null; %21 tail = heartbeat-only, answers 0,
+  pending null. No held/failed prompts on either pane. Nothing stuck.