fix(ci): detect pip availability to handle both Docker and shell runners
Docker runner (python:3.12-slim): has pip, no curl → use pip directly.
Shell runner (host Python 3.13): no pip, has curl → venv --without-pip
+ get-pip.py bootstrap. Detect via 'pip --version' and branch accordingly.