GRM-130: refactor: align venv management to devx.mak targets

.devin/agents/ci-investigator/AGENT.md

@@ -34,12 +34,13 @@ permissions:
 
 You are a CI failure investigator for the grm repo.
 
-## Working Directory
+## Working Directory & Virtual Environment
 
-The grm repo is at `/home/emo/dev/ideas/oblachno/grm`. Always `cd` there first:
-```bash
-cd /home/emo/dev/ideas/oblachno/grm
-```
+The grm repo is at `/home/emo/dev/ideas/oblachno/grm`. Always `cd` there first.
+
+All Python tools run inside `.venv`. `make` targets handle activation
+automatically — always use `make <target>`, never raw `pytest` or `ruff`
+commands. If `.venv` doesn't exist, run `make setup` first.
 
 ## CI Job Dependency Graph
 

.devin/agents/dep-upgrader/AGENT.md

@@ -31,10 +31,14 @@ permissions:
 
 You are a dependency upgrade specialist for the grm repo.
 
-## Working Directory
+## Working Directory & Virtual Environment
 
 The grm repo is at `/home/emo/dev/ideas/oblachno/grm`. Always `cd` there first.
 
+All Python tools run inside `.venv`. `make` targets handle activation
+automatically — always use `make <target>`, never raw `pytest` or `ruff`
+commands. If `.venv` doesn't exist, run `make setup` first.
+
 ## Dependency Reference Locations
 
 - **Python deps**: `pyproject.toml` — `[project] dependencies` and `[project.optional-dependencies]`
@@ -88,8 +92,8 @@ pip install -e .[dev]                    # reinstall with new deps
 ansible-galaxy install -r ansible/requirements.yml  # update collections
 make pytest-cov                          # 100% coverage
 make lint-all                            # ruff + pyright + bandit + ansible-lint + checkmake + actionlint
-python3 -m devx.tools.check_pyproject_deps
-python3 -m devx.tools.check_test_speed --max-seconds 4 --max-single-seconds 0.5
+.venv/bin/python -m devx.tools.check_pyproject_deps
+.venv/bin/python -m devx.tools.check_test_speed --max-seconds 4 --max-single-seconds 0.5
 ```
 
 If the dependency affects Ansible behavior, also run molecule:

.devin/agents/doc-syncer/AGENT.md

@@ -25,10 +25,14 @@ permissions:
 
 You are a documentation sync specialist for the grm repo.
 
-## Working Directory
+## Working Directory & Virtual Environment
 
 The grm repo is at `/home/emo/dev/ideas/oblachno/grm`. Always `cd` there first.
 
+All Python tools run inside `.venv`. `make` targets handle activation
+automatically — always use `make <target>`, never raw `pytest` or `ruff`
+commands. If `.venv` doesn't exist, run `make setup` first.
+
 ## Documentation Structure
 
 ```
@@ -54,14 +58,14 @@ docs/
 
 ### Step 1: Check documentation coverage
 ```bash
-python3 -m devx.ci.doc_coverage --fail-on-missing
+.venv/bin/python -m devx.ci.doc_coverage --fail-on-missing
 ```
 Fix undocumented CLI commands, modules, or CI scripts by adding entries
 to the appropriate docs file.
 
 ### Step 2: Lint documentation structure
 ```bash
-python3 -m devx.ci.lint_docs --root .
+.venv/bin/python -m devx.ci.lint_docs --root .
 ```
 Fix: broken internal links, heading hierarchy skips, TODO/FIXME markers,
 trailing whitespace.
@@ -74,7 +78,7 @@ Update any references to files that were renamed or deleted.
 
 ### Step 4: Verify wiki sync (if investigating a sync failure)
 ```bash
-python3 -m devx.ci.sync_wiki --repo oblachno-oss/grm --strict
+.venv/bin/python -m devx.ci.sync_wiki --repo oblachno-oss/grm --strict
 ```
 Check `docs/mapping.json` — every docs file should have a mapping entry.
 If adding a new docs file, add it to mapping.json with a wiki-compatible

.devin/agents/molecule-runner/AGENT.md

@@ -25,10 +25,14 @@ permissions:
 
 You are a molecule test runner for the grm repo.
 
-## Working Directory
+## Working Directory & Virtual Environment
 
 The grm repo is at `/home/emo/dev/ideas/oblachno/grm`. Always `cd` there first.
 
+All Python tools run inside `.venv`. `make` targets handle activation
+automatically — always use `make <target>`, never raw `pytest` or `ruff`
+commands. If `.venv` doesn't exist, run `make setup` first.
+
 ## Available Scenarios (7 total)
 
 | Scenario | Purpose | Makefile target |

.devin/agents/workflow-validator/AGENT.md

@@ -27,10 +27,14 @@ permissions:
 
 You are a Gitea Actions workflow validator for the grm repo.
 
-## Working Directory
+## Working Directory & Virtual Environment
 
 The grm repo is at `/home/emo/dev/ideas/oblachno/grm`. Always `cd` there first.
 
+All Python tools run inside `.venv`. `make` targets handle activation
+automatically — always use `make <target>`, never raw `pytest` or `ruff`
+commands. If `.venv` doesn't exist, run `make setup` first.
+
 ## Key Files
 
 - `.gitea/workflows/ci.yml` — PR pipeline (quality, detect-changes, pre-merge-check, discover-runners, molecule-tests, molecule-report, release-dry-run, pr-review, auto-merge)