adopt-project.py and shape_materialize.py: a tag whose target the clone lacks is called a tag that names no commit, a recorded tag id is asked only of a clone still in place, and a pinned product only PyYAML misreads is written bare #912

Goal: each pin question is answered from the commit actually pinned, with words that say why, and a pinned product is written so that any YAML reader reads it back as text.

Filed by lane openRepoShape-3, from its triage of #457 at the v1.1.1 release commit 5017830. It groups #457's lines L1-81, L1-82 (its second case) and L2-14, one pull request's worth.

State at 5017830. Read, not run.

• L1-81. commit_in_clone (scripts/shape_materialize.py:3489-3508) asks rev-parse -q --verify <id>^{} of an annotated tag. Where the clone lacks the tag's target, the peel answers nothing, and the id is refused as "an annotated tag that names no commit". Before adopt-project.py and scaffold-project.py: a --pin naming an annotated tag's object id is written as the pin's commit:, under the pin file's "A COMMIT, NEVER A TAG" #651 it was pin-source-unreadable with "git fetch --all first", which was right. bump-leg.py's peeled_target has the same logic.
• L1-82, second case. _recomputed_pin_finding (adopt-project.py:829-846) asks whether a recorded commit: is a tag's id only of a recorded clone still at its path. So check still passes a tag's id where the recorded clone is partial or gone, or where the digest came from gh api. The first case of L1-82 was fixed by scripts/shape_materialize.py and adopt-project.py: a --pin-source that is no clone's top level is refused pin-source-not-a-clone, and check finds a recorded one before a partial clone's NOTE, so a folder inside a clone no longer records the digest of part of its tree, or of nothing (#800) #842.
• L2-14. _neutral_pin_entry (adopt-project.py:13393-13405) quotes a neutral_product_pins: entry only where the project's own reader misreads it. So yes, no, on, off, .5, .inf and .nan are written bare, and PyYAML's safe_load reads them as True, False, 0.5, inf and nan. The root's own validators read them as text, so no gate fails.

Direction.

• L1-81: return (oid, "") from commit_in_clone where the peel cannot be read, and the same in bump-leg.py.
• L1-82: ask the forge (the gh api graphql query adopt-project.py and scaffold-project.py: a --pin naming an annotated tag's object id is written as the pin's commit:, under the pin file's "A COMMIT, NEVER A TAG" #651 added) or say in a NOTE that the id was not asked.
• L2-14: also quote a bare entry that YAML 1.1 or 1.2 core resolves to a bool, null or float. openGlass stays byte for byte.

Size: M.

Lane: openreposhape-3 (openRepoShape-3)