v94.7.1 — Patch: CLI primary path for fetch()

The fetch() function is rewritten to use std::process::Command('git
fetch origin') as the PRIMARY path. This respects ~/.ssh/config
(IdentitiesOnly yes + IdentityFile ~/.ssh/id_ed25519) and works
without a running ssh-agent.

The libgit2 path with Cred::ssh_key_from_agent remains as a fallback
for repos where the CLI path fails.

Fixes the 'unsupported URL protocol; class=Net (12)' error that
surfaced on NixOS/wezterm sessions without ssh-agent.

1 new test: test_fetch_uses_cli_path_successfully.

See: docs/design/concerns-investigation-2026-07-18.md (in dracon-utilities).