weichenandCursor
b10406a58f
Why: main gained the real-combination CI gate after the previous sync, and this branch still has to carry that gate with the isolated identity calls. Evidence: SELF python3 -m unittest recovery/identity/u2/deploy/pin/isolation — 100 tests OK (2 skipped); bash -n scripts/svc.sh. Impact: identity ensure/verify still pass DSN only through the environment; stop waits for the port and can keep the desired state. CI keeps the lifecycle pin step and the svc-realcombo job. Refs: #485 Co-authored-by: Cursor <cursoragent@cursor.com>