feat(acp): move six pinned agent CLIs to their current releases

Gemini CLI 0.58.0 to 0.59.0, OpenClaw 2026.9.2 to 2026.9.3, Hermes 0.21.0 to
0.21.1, CodeBuddy 2.146.0 to 2.147.0, Grok 1.0.13 to 1.0.24, Qoder 1.1.45 to
1.1.47. Every launch contract the registry encodes still holds under the new
pins: `--acp` remains a registered option on CodeBuddy and Qoder, Gemini still
carries both `--acp` and `--skip-trust`, and Grok still takes `--no-auto-update`
and `--permission-mode`'s six values ahead of `agent stdio`, which accepts
nothing but `--debug`, `--debug-file` and `--leader-socket`.

OpenClaw raises its Node floor from 22.22.3 to 24.16.0. 2026.9.3 retires the
Node 22 lane outright, and the range is not merely declared: the package ships a
`node-version.mjs` guard that both source and packaged entry points call, whose
release floors are 24.16.0 and 26.1.0. A Node 22 user would otherwise clear
preflight only to fail at launch. The floor tracks the lowest admitted release,
since a single minimum cannot express the excluded 25.x and 26.0.x windows.

OpenClaw's `supports_mcp: false` keeps its anchor: every session entry point
still opens with `assertSupportedSessionSetup(params.mcpServers)`, whose only
behaviour is to throw on a non-empty list, and the bridge is still reached
through the `acp` subcommand.

Hermes rides a community bridge, so its pin stays exact and audited. The wrapper
is byte-identical to 0.21.0 but for `package.json` and a badge in the README,
`scripts/postinstall.js` matches by sha256 with its `rev-parse <tag>^{commit}`
equality against the 40-hex pin intact, and the new upstream pin resolves as
advertised: annotated tag v2026.9.7 dereferences to exactly 2237be35.

Grok's resume rung stands, its `initialize` still answering `sessionCapabilities`
list, resume and close alongside `promptCapabilities.embeddedContext`, and all
six `@xai-official/grok-<os>-<arch>` optional dependencies are published at
1.0.24, so no platform's trampoline is left without a binary. Each remaining
package's declared `engines.node` still matches its `node_required` floor;
CodeBuddy declares none, so its 22.0.0 floor stays codeg's own.