Function effective_pin 

fn effective_pin(provider_id: &str, requested: &str) -> String

The pinned CLI version an install of provider_id uses: the backend provider registry’s pin (the source of truth), else the caller’s.