Weekly pin run: bounded commands, trustworthy CI reads, a readable task log

[Matlan1]

Summary

• Every git, gh and confirm command the pin pipeline runs now has a time limit, and git never prompts for credentials, so a hung command can no longer hold the GPU lease and the pipeline lock for hours.
• CI is read across all pages of check-runs and counts as green only after two polls show the same completed set; a completed check that did not succeed (cancelled, timed out) is red; the merge is pinned to the commit CI was read for.
• On Windows the weekly run's restart onto new scripts waits for the new run and passes its exit code on, instead of returning at once.
• The scheduled command logs UTF-8 unbuffered and exits with Python's own exit code, so the log survives a hard stop and Task Scheduler sees 0, 1 or 2.

🤖 Generated with Claude Code