py(deps[libvcs]) Pin to command-consistency-fix branch for CI

Point libvcs at the vcs-python/libvcs command-consistency-fix branch via
[tool.uv.sources] to verify vcspull passes against its argument-injection
guards, and widen the constraint to <0.46.0 so the 0.45.1 branch resolves.
Companion pin -- revert to the released libvcs once it ships.

Author: tony

pyproject.toml

@@ -53,7 +53,7 @@ keywords = [
 ]
 homepage = "https://vcspull.git-pull.com"
 dependencies = [
-  "libvcs>=0.44.0,<0.45.0",
+  "libvcs>=0.44.0,<0.46.0",
   "colorama>=0.3.9",
   "PyYAML>=6.0"
 ]
@@ -135,6 +135,11 @@ typings = [
 requires = ["hatchling"]
 build-backend = "hatchling.build"
 
+[tool.uv.sources]
+# Companion pin: test vcspull against the libvcs command-consistency-fix
+# branch. Revert to the released libvcs once it ships.
+libvcs = { git = "https://github.com/vcs-python/libvcs.git", branch = "command-consistency-fix" }
+
 [tool.uv.exclude-newer-package]
 # vcspull's release cadence is tightly coupled to libvcs -- a libvcs
 # release blocking on a 3-day cooldown blocks every contributor's