fix(cli): pin fast-uri to the patched Ajv-compatible v3 range

[BlandineRdl]

🎯 What & why

cli/pnpm-workspace.yaml floors fast-uri at >=3.1.2 with no upper bound, so the lockfile resolved fast-uri@4.0.0 on the production Ajv path — outside the ^3.0.1 range ajv@8 actually declares. This constrains the override to >=3.1.6 <4: the smallest range that keeps Ajv 8 compatibility and excludes every vulnerable v3 release reported in #463, without pulling in a major the CLI was never tested against.

🛠️ How it works

• cli/pnpm-workspace.yaml: fast-uri: '>=3.1.2' => '>=3.1.6 <4'
• cli/pnpm-lock.yaml: fast-uri@4.0.0 => fast-uri@3.1.7 for ajv@8.20.0 and ajv@8.18.0

Seven lines across two files. Dependency resolution only, no CLI or context change.

🧪 How to verify

• cd cli && pnpm why fast-uri --prod => Found 1 version of fast-uri, fast-uri@3.1.7 under ajv@8.20.0
• cd cli && pnpm audit --prod --json => {'info': 0, 'low': 0, 'moderate': 0, 'high': 0, 'critical': 0}
• cd cli && pnpm test:unit => 274 files, 3710 tests passed
• cd cli && pnpm test:integration => 104 files, 1309 tests passed
• cd cli && pnpm install --lockfile-only leaves the lockfile untouched, and its supply-chain policy check passes (527 entries)

⚠️ Heads-up

• The pre-change state was already audit-clean, because the open-ended floor had floated to fast-uri@4.0.0. The defect fixed here is the unpinned major on a production input-validation path, not a live advisory.
• tests/e2e/telemetry-hook-install.e2e.test.ts fails on my machine, identically with and without this change (verified by reinstalling the base lockfile and rerunning). Cause is local git config: url.https://github.com/.insteadof git@github.com: rewrites the SSH remote the test sets, so the hook records https://… where the test expects git@…. Unrelated to this PR; worth a separate look, since CI without that rewrite does not see it (every check on this PR is green).
• fix(cli): patch vulnerable fast-uri on the production Ajv path #463 also asks that this land before PR feat(cli): one shared framework source per machine, user scope and session telemetry #795 is merged. feat(cli): one shared framework source per machine, user scope and session telemetry #795 was merged on 2026-09-09, so that ordering constraint is moot; this branch is based on current next (42f572ca), which already contains it.

📋 Against the acceptance criteria of #463

Two criteria are met in intent but not to the letter — stated here so nobody ticks a box that does not match what landed.

1. cli/package.json constrains fast-uri — in intent only. On next the override lives in cli/pnpm-workspace.yaml; pnpm 12 no longer reads package.json's pnpm field, and the file itself says so (cli/pnpm-workspace.yaml:9-13). The ticket predates that move.
2. Regenerated cli/pnpm-lock.yaml — outcome yes, method no. The four fast-uri entries were edited directly, then validated by the pinned pnpm 12.3.4: it rewrites nothing, the supply-chain policy passes (527 entries), and --frozen-lockfile installs 3.1.7. A full regeneration also passes, but adds ~230 lines of unrelated churn (libc: fields, supports-color peer annotations) — outside the "one small security commit" boundary the ticket sets.
3. No fast-uri advisory — met, and pnpm audit --prod reports zero at every severity.
4. Manifest-validation tests pass — met: schema-validator.unit, codex-plugin-manifest.unit, claude-marketplace-manifest.unit, manifest-repository-adapter.integration => 4 files, 32 tests. schema-validator.ts:8 is the actual require("ajv") consumer.
5. Lands on next before feat(cli): one shared framework source per machine, user scope and session telemetry #795 merges — not achievable. feat(cli): one shared framework source per machine, user scope and session telemetry #795 was merged on 2026-09-09; this branch is based on next (42f572ca), which contains it.

🔗 Linked issue

Closes #463

✅ I certify

• I DO CERTIFY I READ EACH LINE OF THE PULL REQUEST BECAUSE I AM A SOFTWARE ENGINEER, NOT A AI PUPPY.

🤖 Generated with Claude Code

https://claude.ai/code/session_01BZF7CTRvfq3FWDqaCWhkCJ