fix(ci,pi): patch new Pi advisories and stop Windows hiding step failures

npm published three advisories after this stack last passed CI, failing both
Pi extension jobs introduced by the full development-tree audit:

- fast-uri <=3.1.7 and ip-address <=10.7.0 are production dependencies of
  the MCP SDK. Update the Pi lockfile to fast-uri 3.1.8 and ip-address 10.7.2.
- brace-expansion <=5.0.11 exists only inside the Pi coding agent used as the
  CI test host. That package ships its own npm-shrinkwrap.json, so npm
  overrides cannot replace it, and no Pi release (through 0.99.1) has a fixed
  lockfile yet.

Production dependencies stay strictly audited. Development advisories still
fail, except those confined to the test host's own lockfile, which are
reported as warnings until a fixed host can be adopted.

The step now runs under bash on both runners. On Windows the default pwsh
wrapper reported only the final command's exit code, so a failing npm ci,
verify or integration run was hidden whenever the audit passed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014ksPGXPZQTikJYpaGHa6R6

Author: claude

.github/workflows/ci.yml

@@ -235,13 +235,36 @@ jobs:
           python -m pip install -e ".[test]"
       - name: Install and verify the Pi package
         working-directory: integrations/pi
+        # Windows defaults to pwsh, which reports only the last command's exit code.
+        shell: bash
         env:
           ENGRAPHIS_PI_TEST_COMMAND: engraphis-mcp
         run: |
           npm ci --ignore-scripts
           npm run verify
           npm run test:integration
-          npm audit
+          npm audit --omit=dev
+          # Development advisories fail too, except inside the Pi test host: it ships its own
+          # npm-shrinkwrap.json, which npm overrides cannot change. Those stay visible as
+          # warnings until a host release with a fixed lockfile is adopted.
+          npm audit --json > "$RUNNER_TEMP/pi-audit.json" || true
+          python - "$RUNNER_TEMP/pi-audit.json" <<'PY'
+          import json
+          import sys
+
+          with open(sys.argv[1], encoding="utf-8") as handle:
+              report = json.load(handle)
+          host = "node_modules/@earendil-works/pi-coding-agent"
+          blocking = []
+          for name, vulnerability in sorted(report.get("vulnerabilities", {}).items()):
+              nodes = vulnerability.get("nodes") or []
+              if nodes and all(node == host or node.startswith(host + "/") for node in nodes):
+                  print(f"::warning::{name} ({vulnerability.get('severity')}) is pinned by the Pi test host")
+              else:
+                  blocking.append(f"{name} ({vulnerability.get('severity')})")
+          if blocking or "vulnerabilities" not in report:
+              sys.exit("npm audit found development advisories: " + (", ".join(blocking) or "no report"))
+          PY
 
   browser-accessibility:
     name: browser accessibility smoke