release: contract review team 0.1.18 (#151)

## Why
Publish the reviewed contract review team fix that was validated by a
fresh final18 real run. The prior run correctly fail-closed when
reporter artifacts escaped the lead case root and clauses.yaml was not
parseable.

## Changes
- bump marketplace entry/catalog to team 0.1.18
- point source/provenance/governance refs to merged team commit
6aa93bf11a6e37cc9d0444e3335ba953bee0a61f
- expose lead 1.0.10, clause 1.0.5, reporter 1.0.4 member versions
- retain legal disclaimer and source-pointer-only distribution

## Validation
- catalog validator exit 0
- i18n validator exit 0
- targeted JSON/ref assertions
- git diff --check

schemas/market-team-entry.client.schema.json

@@ -358,6 +358,12 @@
               "pattern": "^https://[^\\s/?#@]+/[^\\s?#]+$",
               "description": "不含凭据、查询或片段的 HTTPS Git 仓库 URL；安装另经过远程安全策略。"
             },
+            "repoBranch": {
+              "type": "string",
+              "pattern": "^(?!-)[^\\s]+$",
+              "description": "团队 Git 仓库分支名称；默认 main。安装与更新均按该分支解析，并仍以完整 ref 做不可变校验。",
+              "default": "main"
+            },
             "ref": {
               "type": "string",
               "pattern": "^[0-9a-f]{40}$",

teams/contract-review-team/catalog-metadata.v1.json

@@ -34,7 +34,7 @@
   },
   "release": {
     "state": "known",
-    "version": "0.1.15",
+    "version": "0.1.18",
     "versionScheme": "semver"
   },
   "timestamps": {
@@ -45,7 +45,7 @@
     },
     "releasePublishedAt": {
       "state": "known",
-      "value": "2026-09-07T05:30:00.000Z",
+      "value": "2026-09-06T22:48:48.000Z",
       "precision": "second"
     },
     "reviewedAt": {
@@ -55,7 +55,7 @@
     },
     "upstreamObservedAt": {
       "state": "known",
-      "value": "2026-09-07T05:30:00.000Z",
+      "value": "2026-09-06T22:48:48.000Z",
       "precision": "second"
     }
   },
@@ -63,7 +63,7 @@
     "content": {
       "kind": "git",
       "url": "https://github.com/desirecore-agent/contract-review-team.git",
-      "ref": "9b0bf1d9e730c749e4bb50e883466030b10313f8"
+      "ref": "6aa93bf11a6e37cc9d0444e3335ba953bee0a61f"
     }
   },
   "governance": {
@@ -82,7 +82,7 @@
     },
     "compliance": {
       "licenseEvidencePath": "LICENSE",
-      "reviewedRef": "9b0bf1d9e730c749e4bb50e883466030b10313f8",
+      "reviewedRef": "6aa93bf11a6e37cc9d0444e3335ba953bee0a61f",
       "reviewedAt": "2026-09-07",
       "reviewedBy": "DesireCore Agent",
       "upstreamEndorsed": true

teams/contract-review-team/entry.json

@@ -9,7 +9,7 @@
     "compliance",
     "legal-collaboration"
   ],
-  "latestVersion": "0.1.15",
+  "latestVersion": "0.1.18",
   "i18n": {
     "zh-CN": {
       "name": "合同审查团队",
@@ -32,7 +32,8 @@
   "source": {
     "kind": "git",
     "repoUrl": "https://github.com/desirecore-agent/contract-review-team.git",
-    "ref": "9b0bf1d9e730c749e4bb50e883466030b10313f8"
+    "repoBranch": "main",
+    "ref": "6aa93bf11a6e37cc9d0444e3335ba953bee0a61f"
   },
   "requiredClientVersion": "10.0.136",
   "avatar": {
@@ -47,7 +48,7 @@
       "id": "contract-review-lead",
       "name": "合同审查统筹官",
       "role": "supervisor",
-      "version": "1.0.9"
+      "version": "1.0.10"
     },
     {
       "id": "contract-intake",
@@ -59,7 +60,7 @@
       "id": "clause-extractor",
       "name": "条款结构化官",
       "role": "member",
-      "version": "1.0.3"
+      "version": "1.0.5"
     },
     {
       "id": "risk-scanner",
@@ -77,7 +78,7 @@
       "id": "review-reporter",
       "name": "合同复核出报告官",
       "role": "member",
-      "version": "1.0.2"
+      "version": "1.0.4"
     }
   ],
   "capabilities": [