pipeline: pass explicit --with deps to child jobs (--no-project suppressed PEP 723 and killed the merge in 3s)

Handoff: fixed supervisor + full findings/state so work can resume