e9e4e093

By: ananjiani <ananjiani@noreply.codeberg.org>

chore(ai): update Claude Code to 2.1.296 and guard incomplete reviews (#364)

## Summary

```diff
-Claude Code pin: 2.1.219
+Claude Code pin: 2.1.296
+No successful different-pool reviewer → stop and request human review
```

- Update only the Claude Code input and its own dependency tree. Keep root nixpkgs, llm-agents, Pi, the cache-fix proxy, and the isolated bridge wrapper unchanged.
- Add the missing-review rule to both Pi routing instructions. Keep all model IDs and account scopes unchanged; do not force-register unavailable Grok models.

## Evidence

- **Before:** both the installed CLI and bridge reported `2.1.219 (Claude Code)`.
  **After:** the built raw CLI, normal cache-fixed CLI wrapper, and isolated bridge wrapper report `2.1.296 (Claude Code)`.
- Aragorn evaluation resolves the new Claude Code version and retains the cache-fixed package and isolated bridge configuration.
- An independent recursive lock comparison confirms that only the Claude Code dependency tree changed. Its dedicated nixpkgs and systems inputs follow the updated upstream pin; unrelated root input trees are identical.
- 9 Node tests and 12 Bun compaction tests pass. Nix formatting, statix, deadnix, ripsecrets, JSON parsing, and whitespace checks pass.
- Independent coordinator review of the Flash worker's changes passed.
- Grok's extension already supports 4.7, but the local login and model cache expired. One normal refresh returned HTTP 400. This PR does not change credentials; fresh device login remains a user step.
- No real model request, cache-proxy API flow, full system build, or live activation ran. Required NixCI checks must pass before merge.

## Merge Danger

**Door:** two-way

Revert the pin and lock change, or roll back the prior generation.

**Blast Radius:** Claude

Hosts using the shared Claude Code package receive the new CLI after deployment. Pi's bridge uses the same package. The missing-review rule is prompt policy, not a runtime lock. Routine deployment remains owned by Comin; this PR does not activate anything.

Co-authored-by: Ammar Nanjiani <ammar.nanjiani@gmail.com>
Reviewed-on: https://codeberg.org/ananjiani/infra/pulls/364