ci(cursor-review): bump Cursor CLI pin to 2026.09.10-fd3934a

[cloud-code-bot]

Moves the Cursor CLI pin cursor-review.yml installs from (BE-5869).

Version	2026.09.02-c22c1a3 → 2026.09.10-fd3934a
sha256 (linux/x64 agent-cli-package.tar.gz)	27997c8391ad853a5a732b1845db8ef82a8ba6afb0f7829cc739464f8966e96e
nixpkgs cross-check	not-yet-available — nixpkgs is still on 2026.08.31-4057e58, so this digest is trust-on-first-use
smoke test	passed — install-cursor-cli.sh installed this artifact and the binary self-reported 2026.09.10-fd3934a

You are the trust anchor for this digest. Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during this run — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can.

Merging this bumps cursor-review.yml, which triggers bump-cursor-review-callers.yml and rolls the SHA-pinned caller fleet forward.

Opened by the bump-cursor-cli-pin workflow.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 7e58d04b-b6c1-4f73-b353-10da5eeb72a9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}