pi: read the first semver token from `pi --version`

Taking the last token let trailing text (an update notice) hide an old release and skip the 0.65.1 gate. Take the first token that parses as a version; output with none still lets the review run.