Propagate git PAT to ~/.netrc for dependency authentication

[devin-ai-integration]

Summary

• Write the configured PAT to ~/.netrc during token auth setup so that uv sync can authenticate when fetching private git dependencies from the same host
• Pass --clear to uv venv to handle pre-existing virtual environments gracefully
• Add workflow_dispatch trigger to the CI pipeline for manual runs

What changed

src/source_git.py — When PAT authentication is configured, the token is written to ~/.netrc with restricted permissions (0600). This allows any subsequent git operation within the container (e.g. uv sync resolving [tool.uv.sources] git dependencies) to authenticate against the same host without embedding tokens in pyproject.toml.

src/venv_manager.py — Added --clear flag to uv venv creation, preventing failures when a virtual environment already exists at the target path.

.github/workflows/push.yml — Added workflow_dispatch trigger to enable manual CI runs from the GitHub Actions UI.

Refs

• CFTL-336
• SUPPORT-15344

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[kudj]

LGTM

[devin-ai-integration]

❌ Cannot revive Devin session - the session is too old. Please start a new session instead.