ci(.github/workflows): use the runner's system Python 3.11 (peco-driver)

actions/setup-python can't provision Python on the self-hosted peco-driver
runner (no GitHub hosted tool-cache; can't reach the version manifest). The
runner is provisioned with system python3.11 + Node; replace setup-python in
all four bot workflows with a venv built from the runner's python3.11 (kept on
PATH so later pip / python -m steps resolve to 3.11). Node (for the
@anthropic-ai/claude-code CLI the SDK shells out to) comes from the runner.

Co-authored-by: Isaac

Author: eric-wang-1990

.github/workflows/engineer-bot-followup.yml

@@ -178,9 +178,14 @@ jobs:
 
       - name: Setup Python
         if: steps.filter.outputs.skip != 'true'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
-        with:
-          python-version: '3.11'
+        shell: bash
+        # actions/setup-python can't provision on this self-hosted runner
+        # (no hosted tool-cache). The runner is provisioned with system
+        # python3.11; use it via a venv so pip installs stay isolated and
+        # `pip` / `python -m` resolve to 3.11 for the later steps.
+        run: |
+          python3.11 -m venv "$RUNNER_TEMP/bot-venv"
+          echo "$RUNNER_TEMP/bot-venv/bin" >> "$GITHUB_PATH"
 
       - name: Setup .NET
         if: steps.filter.outputs.skip != 'true'

.github/workflows/engineer-bot.yaml

@@ -109,9 +109,14 @@ jobs:
           git config user.email "${bot_id}+${bot_login}@users.noreply.github.com"
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
-        with:
-          python-version: '3.11'
+        shell: bash
+        # actions/setup-python can't provision on this self-hosted runner
+        # (no hosted tool-cache). The runner is provisioned with system
+        # python3.11; use it via a venv so pip installs stay isolated and
+        # `pip` / `python -m` resolve to 3.11 for the later steps.
+        run: |
+          python3.11 -m venv "$RUNNER_TEMP/bot-venv"
+          echo "$RUNNER_TEMP/bot-venv/bin" >> "$GITHUB_PATH"
 
       - name: Setup .NET
         uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9  # v4.3.1

.github/workflows/reviewer-bot-followup.yml

@@ -157,9 +157,14 @@ jobs:
 
       - name: Setup Python
         if: steps.filter.outputs.skip != 'true'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
-        with:
-          python-version: '3.11'
+        shell: bash
+        # actions/setup-python can't provision on this self-hosted runner
+        # (no hosted tool-cache). The runner is provisioned with system
+        # python3.11; use it via a venv so pip installs stay isolated and
+        # `pip` / `python -m` resolve to 3.11 for the later steps.
+        run: |
+          python3.11 -m venv "$RUNNER_TEMP/bot-venv"
+          echo "$RUNNER_TEMP/bot-venv/bin" >> "$GITHUB_PATH"
 
       - name: Install bot engine (interim PAT git-install) + Claude SDK/CLI
         if: steps.filter.outputs.skip != 'true'

.github/workflows/reviewer-bot.yml

@@ -89,9 +89,14 @@ jobs:
           persist-credentials: false
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
-        with:
-          python-version: '3.11'
+        shell: bash
+        # actions/setup-python can't provision on this self-hosted runner
+        # (no hosted tool-cache). The runner is provisioned with system
+        # python3.11; use it via a venv so pip installs stay isolated and
+        # `pip` / `python -m` resolve to 3.11 for the later steps.
+        run: |
+          python3.11 -m venv "$RUNNER_TEMP/bot-venv"
+          echo "$RUNNER_TEMP/bot-venv/bin" >> "$GITHUB_PATH"
 
       - name: Install bot engine (interim PAT git-install) + Claude SDK/CLI
         env: