chore(deps): bump cloud-commitments-go/pkg to 73d3366 (pkg/insurance)

[cristim]

Pin bump only: pkg a9a426224031 -> 73d3366903bc (contains pkg/insurance, go#285). go.mod/go.sum only, tidy only, no other pin touched. Forward move (old pin is an ancestor).

Verification (local, macOS): go build ./... and go vet ./... exit 0; go test exit 0 for internal/{api,auth,commitmentopts,config,credentials,database,email,execution,mocks,purchase,scheduler,secrets,server,server/scheduledauth}; go test -tags integration exit 0 for internal/api and internal/server. analytics also ok.

Refs #785 #786

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 1 billable file and costs up to $0.25.}

• Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 46 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 87 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Repository: LeanerCloud/cloud-commitments-platform/.coderabbit.yaml
• Review profile: CHILL
• Plan: Essentials
• Run ID: f45df01a-5ea5-4271-9543-d9fa1db08be8

---

📥 Commits

Reviewing files that changed from the base of the PR and between 525e6ad and 22b39e2.

---

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

---

📒 Files selected for processing (1)

• go.mod

---

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[cristim]

Gate (independent review) at 7948685: content CLEAN, merge BLOCKED (mergeStateStatus DIRTY).

• Pin: pkg a9a42622 -> 73d3366903bc; 73d3366 is on cloud-commitments-go main, pseudo-version timestamp 20261008151559 matches the UTC commit time, a9a42622 is an ancestor (forward move). No replace directives; providers/aws, azure, gcp pins unchanged. go.sum diff is only the two pkg lines; go mod tidy at the head is a no-op.
• Range a9a42622..73d3366 -- pkg: 9c5b6f7 test(exchange) (test files only) and 73d3366 feat(insurance) (new pkg/insurance, not imported by the platform). No behaviour change for purchase sizing, dedupe, currency, exchange or ladder.
• Local (git archive, go1.26.9, GOWORK=off): go build ./... 0, go vet ./... 0, go test ./internal/... 0; integration api/server/purchase 0 (one run had a server failure and one a testcontainers SetupPostgresContainer failure at ramp_step_progress_integration_test.go:49, both passed on rerun; infra flakes, unrelated to a go.mod-only change).
• CI: 25/25 pass at this SHA.
• Blocker: main moved (fix(purchase): refuse retry and re-drive of AWS EC2 and Redshift purchases #778 bumped providers/aws to bcc0dfc49227) and go.mod/go.sum now conflict. Author: merge origin/main (normal merge, keep both pins), re-tidy, push; gate restarts at the new head.

[cristim]

Gate re-run at 22b39e2 (after merging main incl. #778): CLEAN, merging.

• Diff vs origin/main: go.mod only the pkg line a9a42622 -> 73d3366903bc (providers/aws stays bcc0dfc49227), go.sum +2/-2. Earlier range review carries over (9c5b6f7 exchange tests only; 73d3366 new pkg/insurance, not imported): no behaviour change for sizing, dedupe, currency, exchange or ladder.
• Local from git archive (go1.26.9, GOWORK=off, -mod=readonly): go build ./... 0, go vet ./... 0, go test ./internal/... 0, go test -count=1 -tags integration ./internal/api/ ./internal/server/ ./internal/purchase/ 0 (api 144.8s, server 36.5s, purchase 35.3s; no flake this run).
• CI 25/25 pass, mergeStateStatus CLEAN at this SHA. main has since gained 059292f (frontend-only, fix(frontend): meet WCAG AA contrast and show keyboard focus #769), no go.mod/go.sum overlap.