chore(invoice-organizer): 1.0.3 —— 重新 pin 到已合并 commit (#144)

接 #138。那个 PR 只改技能内容，刻意没动版本号与 pin——contentSource.ref 必须
指向已合并的 commit，而那个 SHA 在合并前并不存在。这是同一条两步约束的第四次
（#117/#118、#120/#121、#127/#130 之后）。

- agent.json#contentSource.ref、sidecar 的 provenance.content.ref 与
  governance.compliance.reviewedRef 三处同步 pin 到 450be28
- 版本 1.0.2 → 1.0.3（agent.json 与 sidecar release.version 两处一致）
- 补 1.0.3 changelog（中英双语）

1.0.3 修的是：PDF 文本层在「两栏先输出全部标签、再输出全部取值」的版式下，
按「标签后紧跟的下一段文字」配对会把字段标签本身抽成销售方/购买方名称，且
所有形式勾稽都不会报错。新增硬校验：名称命中已知标签模式即判定提取失败，
先同页重定位、再整页视觉阅读，仍不能确定则按必填字段缺失隔离。

timestamps 三项已经是 2026-09-06，本次无需变更；结构化形态原样保持。

agents/invoice-organizer/agent.json

@@ -17,7 +17,7 @@
     "finance",
     "email"
   ],
-  "version": "1.0.2",
+  "version": "1.0.3",
   "updatedAt": "2026-09-06",
   "maintainer": {
     "name": "DesireCore Official",
@@ -124,6 +124,18 @@
     "tools": []
   },
   "changelog": [
+    {
+      "version": "1.0.3",
+      "date": "2026-09-06",
+      "changes": {
+        "zh-CN": [
+          "新增「名称字段的标签污染防护」：PDF 文本层在「两栏先输出全部标签、再输出全部取值」的版式下，按「标签后紧跟的下一段文字」配对会把字段标签本身抽成销售方/购买方名称；现规定名称命中已知标签模式即判定为提取失败，先在同页重新定位、再退到整页视觉阅读，仍不能确定则按必填字段缺失隔离，不得从邮件主题、文件名或相邻税号猜公司名"
+        ],
+        "en-US": [
+          "Add a name-label contamination guard: when a PDF text layer emits both columns' labels first and both columns' values afterwards, pairing a label with the text that follows it captures the label itself as the seller/buyer name. A name matching a known label pattern is now treated as an extraction failure — relocate within the page, then fall back to full-page visual reading, and finally quarantine as a missing required field rather than guessing the company from the subject, filename or adjacent tax ID"
+        ]
+      }
+    },
     {
       "version": "1.0.2",
       "date": "2026-09-06",
@@ -175,6 +187,6 @@
     "kind": "git",
     "repoUrl": "https://github.com/desirecore/market.git",
     "path": "agents/invoice-organizer",
-    "ref": "406bc10bccddd8b57436bc7035f065b2c327a286"
+    "ref": "450be28a2b0686cdd4a51427224c94749469ee89"
   }
 }

agents/invoice-organizer/catalog-metadata.v1.json

@@ -30,7 +30,7 @@
   },
   "release": {
     "state": "known",
-    "version": "1.0.2",
+    "version": "1.0.3",
     "versionScheme": "semver"
   },
   "timestamps": {
@@ -58,7 +58,7 @@
       "kind": "git",
       "url": "https://github.com/desirecore/market.git",
       "path": "agents/invoice-organizer",
-      "ref": "406bc10bccddd8b57436bc7035f065b2c327a286"
+      "ref": "450be28a2b0686cdd4a51427224c94749469ee89"
     }
   },
   "governance": {
@@ -75,7 +75,7 @@
     },
     "compliance": {
       "licenseEvidencePath": "LICENSE",
-      "reviewedRef": "406bc10bccddd8b57436bc7035f065b2c327a286",
+      "reviewedRef": "450be28a2b0686cdd4a51427224c94749469ee89",
       "reviewedAt": "2026-09-06",
       "reviewedBy": "yi-ge",
       "upstreamEndorsed": true