* chore: minor fixups across errors, oci_container, and options
- Strengthen error message wording: 'is expected to' → 'must' and
'is expected to place one' → 'must place exactly one' in
FailedWheelRepairError classes.
- Remove shell=True from subprocess.run in oci_container debug_info,
passing command as a list instead of a string.
- Update pinned image error message from 'cibuildwheel 3.x' to
'cibuildwheel 4.x' and add comment about next warning candidate.
Assisted-by: OpenCode:glm-5
* Update cibuildwheel/options.py