wip(rm-02): round-4 remediation held at RM-60 boundary

.woodpecker/ci.yml

@@ -72,12 +72,8 @@ steps:
   # step-level `when`, because a gate can be disabled by changes outside its own path.
   gate-verify:
     image: *node_image
-    # Woodpecker's shallow marker makes merge-base reject even present parents;
-    # full history is required for activation ancestry and manifest provenance.
     commands:
       - *enable_pnpm
-      - apk add --no-cache bubblewrap
-      - if [ -f .git/shallow ]; then git fetch --unshallow --no-tags origin; fi
       - pnpm gate:verify
     depends_on:
       - install