🐛 kettle-jem: stop overriding the github git source with SSH in the Gemfile template

[pboling]

Problem

gems/kettle-jem/lib/kettle/jem/templates/Gemfile.example (added in a61dca1) defines

git_source(:github) { |repo_name| "git@github.com:#{repo_name}.git" }

Every templated project therefore locks its github: gems with git@github.com: remotes in Gemfile.lock. CI runners have no SSH key, so locked_deps.yml fails in rv clean-install with Permission denied (publickey). This blocked the releases of kettle-rb, kettle-ndjson, kettle-gha-pins and kettle-wash (fixed per-repo in kettle-dev/kettle-rb#7, kettle-dev/kettle-ndjson#3, kettle-dev/kettle-gha-pins#2, kettle-dev/kettle-wash#2).

Fix

• Remove the override from the packaged Gemfile so Bundler's built-in (HTTPS) github: source is used. Local SSH preferences still apply at clone time through git's url.<base>.insteadOf, without being recorded in lockfiles.
• Invert the spec that asserted the SSH override: the packaged Gemfile must not define git_source(:github).
• CHANGELOG entry.

Verified locally with KETTLE_DEV_DEV=true (monorepo path gems): spec/integration/structural_merge_template_spec.rb, including the inverted example.

Note: the Gemfile merge has no removal rule for git_source, so projects already templated keep their git_source(:github) line until it is removed (and the lockfile relocked) in each project.

Pre-existing, unrelated failure (also fails on origin/main with KETTLE_DEV_DEV=true):

rspec ./spec/integration/structural_merge_template_spec.rb:452

🤖 Generated with Claude Code

https://claude.ai/code/session_01P8aveNcdgPobyMrq8DkD9r