Corepack and Install-Script Trust
Installing dependencies is part tool selection and part trust decision, so both should be explicit in project configuration.
Nova 0.26.0 limited package-manager support to Corepack-compatible clients and documented the boundary around dependency lifecycle scripts.