Harden test workflows with intentional shallow clone and version checks

Use an intentionally shallow clone (fetch-depth: 1) to test wheel installation
without full git history. This ensures we're testing the wheel artifacts
themselves, not building from source.

Changes:
- Set fetch-depth: 1 explicitly (although it is the default) with comment
  emphasizing that shallow cloning is intentional
- Add --only-binary=:all: to cuda-python installation to ensure we only test
  wheels, never build from source
- Add "Verify installed package versions" step that imports cuda.pathfinder
  and cuda.bindings to trigger __version__ assertions immediately after
  installation, providing early detection of invalid versions
- Update comments to accurately reflect that we're testing wheel artifacts

This approach hardens the test workflows by:
- Making the shallow clone intentional and explicit
- Actually testing that __version__ assertions work (fail-fast on invalid
  versions)
- Catching version issues immediately after installation, before tests run
- Ensuring we only test wheels, not source builds

Applied consistently to both:
- .github/workflows/test-wheel-windows.yml
- .github/workflows/test-wheel-linux.yml

Author: rwgk

.github/workflows/test-wheel-linux.yml

@@ -37,6 +37,8 @@ jobs:
     steps:
       - name: Checkout ${{ github.event.repository.name }}
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        with:
+          fetch-depth: 1  # Intentionally shallow clone to test wheel installation without full git history
 
       - name: Validate Test Type
         run: |
@@ -94,6 +96,8 @@ jobs:
 
       - name: Checkout ${{ github.event.repository.name }}
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        with:
+          fetch-depth: 1  # Intentionally shallow clone to test wheel installation without full git history
 
       - name: Setup proxy cache
         uses: nv-gha-runners/setup-proxy-cache@main
@@ -269,17 +273,22 @@ jobs:
       - name: Ensure cuda-python installable
         run: |
           if [[ "${{ matrix.LOCAL_CTK }}" == 1 ]]; then
-            pip install cuda_python*.whl
+            pip install --only-binary=:all: cuda_python*.whl
           else
-            pip install $(ls cuda_python*.whl)[all]
+            pip install --only-binary=:all: $(ls cuda_python*.whl)[all]
           fi
 
+      - name: Verify installed package versions
+        run: |
+          # Trigger __version__ assertions to guard against setuptools-scm fallback versions
+          python -c 'import cuda.pathfinder'
+          python -c 'import cuda.bindings'
+
       - name: Install cuda.pathfinder extra wheels for testing
         run: |
           set -euo pipefail
           pushd cuda_pathfinder
-          # Install pathfinder from the pre-built wheel, since building from
-          # source won't work in this context (we don't have a git checkout).
+          # Install pathfinder from the pre-built wheel to test the wheel artifacts
           pip install --only-binary=:all: -v ./*.whl --group "test-cu${TEST_CUDA_MAJOR}"
           pip list
           popd

.github/workflows/test-wheel-windows.yml

@@ -34,6 +34,8 @@ jobs:
     steps:
       - name: Checkout ${{ github.event.repository.name }}
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        with:
+          fetch-depth: 1  # Intentionally shallow clone to test wheel installation without full git history
 
       - name: Validate Test Type
         run: |
@@ -70,6 +72,8 @@ jobs:
     steps:
       - name: Checkout ${{ github.event.repository.name }}
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        with:
+          fetch-depth: 1  # Intentionally shallow clone to test wheel installation without full git history
 
       - name: Setup proxy cache
         uses: nv-gha-runners/setup-proxy-cache@main
@@ -236,11 +240,18 @@ jobs:
       - name: Ensure cuda-python installable
         run: |
           if ('${{ matrix.LOCAL_CTK }}' -eq '1') {
-            pip install (Get-ChildItem -Filter cuda_python*.whl).FullName
+            pip install --only-binary=:all: (Get-ChildItem -Filter cuda_python*.whl).FullName
           } else {
-            pip install "$((Get-ChildItem -Filter cuda_python*.whl).FullName)[all]"
+            pip install --only-binary=:all: "$((Get-ChildItem -Filter cuda_python*.whl).FullName)[all]"
           }
 
+      - name: Verify installed package versions
+        shell: bash --noprofile --norc -xeuo pipefail {0}
+        run: |
+          # Trigger __version__ assertions to guard against setuptools-scm fallback versions
+          python -c 'import cuda.pathfinder'
+          python -c 'import cuda.bindings'
+
       - name: Install cuda.pathfinder extra wheels for testing
         shell: bash --noprofile --norc -xeuo pipefail {0}
         run: |