chore(deps): update dependency entireio/cli to v0.7.3

[qubesome-renovate]

This PR contains the following updates:

Package	Update	Change
entireio/cli	minor	v0.6.3 → v0.7.3

---

Release Notes

entireio/cli (entireio/cli)

v0.7.3

Compare Source

Fixed

• Fixed a bug where internal API calls didn't follow a redirect properly (#​1327)

v0.7.2

Compare Source

Fixed

• macOS release binaries are Developer ID signed and notarized again. Adding the git-remote-entire binary in 0.7.0 gave the release builds explicit ids that no longer matched the notarization step's default filter, so 0.7.0 shipped ad-hoc-signed binaries that macOS Gatekeeper refused to run — surfacing as Homebrew shell-completion errors and killed on launch (#​1324)

Housekeeping

• The release workflow now fails closed when any macOS binary is not Developer ID signed, so an un-notarized build can no longer ship silently (#​1324)

v0.7.0

Compare Source

Added

• The git-remote-entire remote helper now ships inside the CLI and activates from a shared contexts.json login, so entire:// remotes work without a separately installed helper (#​1306)
• Control-plane CLI backed by a generated Core API client — manage orgs, projects, repos, grants, and mirrors directly from entire (work in progress) (#​1299)
• Checkpoints v1.1 (work in progress): committed checkpoints can be mirrored to a v1 custom ref (opt-in, local-only), with v1.1 write support and entire explain reading the new format (#​1300, #​1315, #​1311)
• entire investigate labs command: an experimental multi-agent investigation loop (#​1231)
• Skill event metadata is now captured for Claude and Pi (#​1292)

Changed

• entire login is simpler — dropped the clipboard copy and code-entry prompt added in 0.6.3 (#​1322)
• Internal auth rework spanning auth contexts, cluster trust, and the control-plane client: simplified contexts (removed the cluster-binding model and command surface, "login server" wording, clear current_context on delete), hardened cluster trust with ephemeral binding and a HostInCluster specificity floor, auto-select v2 auth on split-host, routed status/list/revoke/logout through TokenForResource, pinned the AuthBaseURL default, added a control-plane client keyring deadline, and raised the dial timeout 500ms → 2s (#​1318, #​1319, #​1309, #​1290, #​1258, #​1297, #​1307, #​1317)
• Checkpoints v1 restored as the source of truth — the v2 dual-read path was removed (#​1285)
• Pi model is now backfilled into checkpoint metadata from the transcript (#​1298)

Fixed

• entire install points Windows users at Scoop instead of failing (#​1289)
• Checkpoint commits reachable only through relative alternates (shared clones) are now resolvable by go-git (#​1288)
• entire trail preserves the forge identifier from entire:// remote URLs (#​1286)
• Checkpoint git subprocesses are bounded to their context deadline, so a hung git call can't wedge a hook (#​1282)
• The CLI no longer reports an unknown revision after a go install upgrade (#​1273)
• Local-dev builds fall back to the PATH binary when the local build is broken (#​1274)
• Mirror connection reuse: the probe body is now drained before close so the idle connection pool actually works (#​1320)

Housekeeping

• Per-phase perf spans added to checkpoint pre-push (#​1281)
• Removed dead code and deduped redundant review/strategy tests (#​1303, #​1302, #​1301)
• Trimmed the CLAUDE.md file, added the current Pi extension config, and ship the git-remote-entire helper during mise run dev:publish (#​1295, #​1314, #​1308)
• Dependency bumps: go-dependencies group, goreleaser/goreleaser-action 7.2.1 → 7.2.2 (#​1293, #​1227)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.