#216 fix(ruler): run the locked ruler for global apply

Summary

• ruler-apply-global ran bun x @intellectronica/ruler, which resolves the latest npm release on every run (0.3.44 today). The dotfiles fleet updater now runs it unattended every 3 hours, so it now installs from bun.lock and runs node_modules/.bin/ruler (0.3.23, already a locked devDependency).

Verification

• make ruler-apply-global exits 0; ~/.claude/CLAUDE.md, ~/AGENTS.md, Cursor rules and ~/.gemini/settings.json are byte-identical to the bun x output.

🤖 Generated with Claude Code

---

Summary by cubic

Runs the locked ruler binary for ruler-apply-global instead of bun x @intellectronica/ruler, which fetched the latest npm release (0.3.44) on every run. Since the dotfiles fleet updater now executes this unattended every 3 hours, it uses the version pinned in bun.lock (node_modules/.bin/ruler, 0.3.23).