fix: close Pi management final review findings

scripts/verify-workspace-install-docs.sh

@@ -1131,10 +1131,21 @@ NODE
 
 verify_pi_management_guide() {
   local guide="$root/docs/install/pi-management.md"
+  local lifecycle_contract="$root/docs/contracts/thothctl-pi.md"
   [[ -f "$guide" ]] || {
     echo "missing Pi management guide: docs/install/pi-management.md" >&2
     return 1
   }
+  [[ -f "$lifecycle_contract" ]] || {
+    echo "missing Pi lifecycle contract: docs/contracts/thothctl-pi.md" >&2
+    return 1
+  }
+  require_text "$lifecycle_contract" "Pi lifecycle contract" \
+    "io.thothii.pi.version"
+  if grep -Fq 'org.opencontainers.image.version' "$lifecycle_contract"; then
+    echo "Pi lifecycle contract must use io.thothii.pi.version, not org.opencontainers.image.version" >&2
+    return 1
+  fi
   require_headings "$guide" "Pi management guide" \
     "Choose application defaults" \
     "Edit the provider catalog and enabled-model policy" \