Preserve updater build source provenance (ilysenko#1117)

* Preserve updater build source provenance

* Harden updater source remote sanitization

* Cover provenance across fake package builders

Author: PinguuSS

CHANGELOG.md

@@ -35,6 +35,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Fixed
 
+- Updater rebuild workspaces now retain the Git identity of the wrapper source
+  after `.git` is stripped, so installed build metadata and packaged
+  update-builder metadata report the wrapper commit instead of `unknown`.
 - V2 pets now look toward the live pointer position after successful Linux
   Computer Use click, scroll, and drag actions, then return to their normal
   animation. The bridge is isolated per app instance and fails softly when its

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "codex-update-manager"
-version = "0.10.1"
+version = "0.10.2"
 edition = "2021"
 
 [dependencies]