ci: fix Custodian install syntax (Direct URL form)

Author: ProtocolWarden

.console/log.md

@@ -123,3 +123,6 @@ Added .github/workflows/custodian-audit.yml + .hooks/pre-push.
 Both run `custodian-multi --fail-on-findings`. CI is the source of
 truth; pre-push catches regressions before they hit GitHub.
 
+
+## 2026-05-08 — CI fix: Direct URL pip install syntax
+

.github/workflows/custodian-audit.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Install Custodian
         run: |
           python -m pip install --upgrade pip
-          pip install "git+https://github.com/Velascat/Custodian.git@main#egg=custodian[tools]"
+          pip install "custodian[tools] @ git+https://github.com/Velascat/Custodian.git@main"
           pip install ruff vulture ty
 
       - name: Install repo (best-effort, for adapter passes)