fix(ci): restore icp-cli version pin (ICP_CLI_VERSION=0.2.0)

Keep the pinned version as a safeguard alongside the network-launcher pin.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Web3NL

scripts/constants.sh

@@ -5,6 +5,9 @@
 export REPO_ROOT
 REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 
+# 🔧 Pinned tool versions
+export ICP_CLI_VERSION="0.2.0"
+
 # 💰 Cycle amounts
 export CANISTER_INITIAL_CYCLES="1000000000000"
 

validate-and-test-all.sh

@@ -16,6 +16,13 @@ set -euo pipefail
 
 source "$(dirname "$0")/scripts/constants.sh"
 
+# 🔧 Enforce pinned icp-cli version (same locally and in CI)
+CURRENT_ICP_VERSION=$(icp --version 2>/dev/null | awk '{print $2}' || echo "not installed")
+if [ "$CURRENT_ICP_VERSION" != "$ICP_CLI_VERSION" ]; then
+  echo "📦 Installing icp-cli@${ICP_CLI_VERSION} (current: ${CURRENT_ICP_VERSION})..."
+  npm install -g "@icp-sdk/icp-cli@${ICP_CLI_VERSION}"
+fi
+
 # ⏱️ Per-step timing
 SCRIPT_START_TIME=$(date +%s)
 T_STATIC=0