deps: fix cargo-deny bans failure from duplicate crate versions

deny.toml

@@ -4,13 +4,13 @@
   # These are cross-major-version splits not controllable without upstream changes.
   skip = [
     { name = "core-foundation" },
-    { name = "crossterm" },
     { name = "getrandom" },
     { name = "hashbrown" },
     { name = "linux-raw-sys" },
     { name = "rustix" },
     { name = "thiserror" },
     { name = "thiserror-impl" },
+    { name = "unicode-width" },
     { name = "windows-sys" },
     { name = "windows-targets" },
     { name = "windows_aarch64_gnullvm" },

ui/tui/Cargo.toml

@@ -20,7 +20,10 @@
   crossterm = { version = "0.28", features = ["event-stream"] }
   domain = { path = "../../domain" }
   futures = "0.3"
-  itertools = "0.14"
+  # Pinned to 0.13 to unify with ratatui 0.29, which also depends on itertools 0.13.
+  # cargo-deny's bans check rejects duplicate versions; only with_position()/Position
+  # are used here, an API present in both 0.13 and 0.14. Bump in lockstep with ratatui.
+  itertools = "0.13"
   open = "5"
   pulldown-cmark = { version = "0.13", default-features = false }
   # Pinned to 0.29 to unify with tui-textarea 0.7, which also depends on 0.29.

workflows/src/dispatch.rs

@@ -95,7 +95,7 @@ pub(crate) fn build_task_prompt(task: &Task) -> String {
          (<slug> is a short kebab-case summary of the task title)"
     ));
     lines.push(format!(
-        "2. hub task link {id} ~/.hub/agent-session-logs/{id}-<slug>.md"
+        "2. hub task link {id} --value ~/.hub/agent-session-logs/{id}-<slug>.md"
     ));
     lines.push(format!("3. hub task report {id} --status in-review"));
     lines.push(String::new());
@@ -935,5 +935,13 @@ mod tests {
             completion_section.contains("hub task report TASK-0099 --status in-review"),
             "completion steps must include the full report command"
         );
+        // The link command requires the --value flag; without it the CLI
+        // rejects a bare path argument, so the injected instruction must match.
+        assert!(
+            completion_section.contains(
+                "hub task link TASK-0099 --value ~/.hub/agent-session-logs/TASK-0099-<slug>.md"
+            ),
+            "completion steps must use the --value flag for the link command"
+        );
     }
 }