Publish Fragment and render-diff run the toolkit the Estate repository pins #152

What to build

Publish Fragment and the render-diff action install the deploy-kit version the Estate repository's toolkit file names, read at a resolved Estate commit when they run, instead of the lockfile under tools/deploy-kit. A run that cannot read it fails. tools/deploy-kit and the Renovate rule that holds it behind the Estate repository's pin are removed. After this, a toolkit upgrade changes no application repository.

Acceptance criteria

• Both read the file at one resolved Estate commit and install exactly that version.
• tools/deploy-kit is gone, and so is its Renovate rule.
• The tests cover a missing file and an unreadable Estate repository.

Blocked by

• Pin the toolkit in one file, without a package.json estate#82
• The Estate repository pins the one toolkit version every workflow runs deploy-kit#437