release: contract review team 0.1.18 (#151)

## Why
Publish the reviewed contract review team fix that was validated by a
fresh final18 real run. The prior run correctly fail-closed when
reporter artifacts escaped the lead case root and clauses.yaml was not
parseable.

## Changes
- bump marketplace entry/catalog to team 0.1.18
- point source/provenance/governance refs to merged team commit
6aa93bf11a6e37cc9d0444e3335ba953bee0a61f
- expose lead 1.0.10, clause 1.0.5, reporter 1.0.4 member versions
- retain legal disclaimer and source-pointer-only distribution

## Validation
- catalog validator exit 0
- i18n validator exit 0
- targeted JSON/ref assertions
- git diff --check

teams/contract-review-team/entry.json

@@ -9,7 +9,7 @@
     "compliance",
     "legal-collaboration"
   ],
-  "latestVersion": "0.1.15",
+  "latestVersion": "0.1.18",
   "i18n": {
     "zh-CN": {
       "name": "合同审查团队",
@@ -32,7 +32,8 @@
   "source": {
     "kind": "git",
     "repoUrl": "https://github.com/desirecore-agent/contract-review-team.git",
-    "ref": "9b0bf1d9e730c749e4bb50e883466030b10313f8"
+    "repoBranch": "main",
+    "ref": "6aa93bf11a6e37cc9d0444e3335ba953bee0a61f"
   },
   "requiredClientVersion": "10.0.136",
   "avatar": {
@@ -47,7 +48,7 @@
       "id": "contract-review-lead",
       "name": "合同审查统筹官",
       "role": "supervisor",
-      "version": "1.0.9"
+      "version": "1.0.10"
     },
     {
       "id": "contract-intake",
@@ -59,7 +60,7 @@
       "id": "clause-extractor",
       "name": "条款结构化官",
       "role": "member",
-      "version": "1.0.3"
+      "version": "1.0.5"
     },
     {
       "id": "risk-scanner",
@@ -77,7 +78,7 @@
       "id": "review-reporter",
       "name": "合同复核出报告官",
       "role": "member",
-      "version": "1.0.2"
+      "version": "1.0.4"
     }
   ],
   "capabilities": [