Merge away shape/.gitignore with update-shape.py apply, which drops its pin row, fix the .gitignore comment, and note beside the curl one-liner that without gh it needs api.github.com and makes 6 GitHub API calls (part of opensoft/openRepoTools#186)

.gitignore

@@ -1,7 +1,7 @@
 __pycache__/
 *.py[cod]
 .pytest_cache/
-# Merged from the shape's copy, `shape/.gitignore` (pinned, left in place).
+# Merged from the shape's copy, `shape/.gitignore`, removed once merged.
 .venv/
 .DS_Store
 # Paired feature worktrees, `worktrees/<NNN-feature>/{spec,code}/`: linked

README.md

@@ -258,7 +258,7 @@ gh api repos/opensoft/openRepoTools/contents/openRepoTools \
 
 Both lines are unchanged by the split: the `openRepoTools` they fetch is this
 root's entry point, which hands over to the installer `code/openRepoTools` at
-the commit this root pins.
+the commit this root pins. Since the split, on a host without `gh`, the `curl` line also needs `api.github.com`: it makes 6 GitHub API calls per install, where it made none before, and reads three of their answers with `jq`, which the hook merges below already need.
 
 A workstation uses ONE install route or the other, never both — pipx's `openrepotools`
 or workBenches' `./setup.sh` — until opensoft/workBenches#165 lets its

contracts/shape-pin.yaml

@@ -48,8 +48,6 @@ files:
     sha256: "d2bd1cfc8515088980df66c8adda3fdaea908e7e2eba6f94062c1b9e65610995"
   - path: Makefile
     sha256: "6d65dd06e12564a7c018a72a5a2e3c80b999d7026ce5643e77ca8dd6e9254dfa"
-  - path: shape/.gitignore
-    sha256: "00256b4fddd74373bd31f7726469936deee31f171515a2e0e1b2364a5c543223"
   - path: shape/.gitattributes
     sha256: "e2b88cf25928c5a58bb2acaae1779d934c262273db708d0aa6dfb01591b15baa"
   - path: .github/workflows/validate.yml