test(policy): e2e integration tests for require_pinned_constraint (follow-up to #1494)

tests/fixtures/policy/require_pinned/apm-policy-block.yml

@@ -0,0 +1,8 @@
+# Fixture: require_pinned_constraint enabled at block enforcement.
+# Used by tests/integration/policy/test_require_pinned_constraint_e2e.py
+# to verify that an unbounded dep aborts install with a policy block.
+name: require-pinned-block-policy
+version: "1.0.0"
+enforcement: block
+dependencies:
+  require_pinned_constraint: true

tests/fixtures/policy/require_pinned/apm-policy-off.yml

@@ -0,0 +1,9 @@
+# Fixture: require_pinned_constraint explicitly disabled (default).
+# Used by tests/integration/policy/test_require_pinned_constraint_e2e.py
+# to verify backward-compat: even at enforcement=block, an unbounded
+# dep must NOT be flagged when the field is false.
+name: require-pinned-off-policy
+version: "1.0.0"
+enforcement: block
+dependencies:
+  require_pinned_constraint: false