ci: fix qpk pin downstream ref check

Squash merge follow-up fix for update-qpk-pin downstream ref validation.

Author: Pigbibi

.github/workflows/update-qpk-pin.yml

@@ -65,16 +65,24 @@ jobs:
           python -c "from quant_platform_kit.notifications.telegram import send_telegram_message; print('telegram OK')"
           python -c "from quant_platform_kit.common.contracts import SnapshotProfileContract; print('contracts OK')"
 
-          # Verify strategy repos installable with NEW constraints
+          # Verify strategy repo refs are fetchable and package metadata is buildable.
+          #
+          # Strategy packages currently carry their own direct QPK pin. A full
+          # dependency solve with the newly generated top-level QPK constraint
+          # would conflict until downstream repos update those pins, so keep this
+          # check focused on the package refs generated above.
           failed=0
           for dep in us-equity-strategies hk-equity-strategies cn-equity-strategies crypto-strategies; do
             echo "Checking $dep..."
-            if python -m pip install --dry-run -c constraints.txt "$dep" >/dev/null 2>&1; then
+            log_file="$(mktemp)"
+            if python -m pip install --dry-run --no-deps -c constraints.txt "$dep" >"${log_file}" 2>&1; then
               echo "  $dep OK"
             else
               echo "  $dep FAILED"
+              sed -n '1,160p' "${log_file}"
               failed=1
             fi
+            rm -f "${log_file}"
           done
           if [ "${failed}" -ne 0 ]; then
             echo "One or more downstream dependency checks failed." >&2