fix(teams): align contract review client compatibility (#124)

## Why

The published pointer advertises client version `10.0.137`, while the
current DesireCore release is `10.0.136`. The newcomer instance
therefore correctly blocks installation even though the team source is
compatible with the current client.

## What changed

- align the team pointer's `requiredClientVersion` with the current
client version;
- align the catalog sidecar's compatibility declaration with the same
version.

No source pointer, team member, capability, privacy, or governance claim
changed.

## Validation

- `uv run scripts/catalog/validate_catalog_metadata.py --json` — 0
errors, 129 existing warnings
- `uv run scripts/catalog/test_validate_catalog_metadata.py` — 47 passed
- `uv run scripts/catalog/test_collection_generator.py` — 4 passed
- public-tree sensitive-pattern scan — zero matches

teams/contract-review-team/entry.json

@@ -34,7 +34,7 @@
     "repoUrl": "https://github.com/desirecore-agent/contract-review-team.git",
     "ref": "73cd87a9901cc548871927e9d5dbec8e4cc6c2b1"
   },
-  "requiredClientVersion": "10.0.137",
+  "requiredClientVersion": "10.0.136",
   "avatar": {
     "t": "合审",
     "bg": "linear-gradient(135deg, #5856D6, #3634A3)"