Run Python tooling in repository virtual environments so xiaoxin respects the PEP 668 system package boundary.