Fixed
- pi-subagents is published with npm provenance again, so pnpm's
trustPolicy: no-downgradeaccepts it. Releases now go out only through the GitHubReleaseworkflow after maintainer approval. The code is the same as 0.72.0, which was published without provenance. Thanks to @williameckert1 for #2453.