chore(harbor): pin the default fork to c9b7036 for the tbh agent (#985)

Harbor PR #12 adds tbh as an installed agent. Bumping HARBOR_DEFAULT_SHA
and both lockfiles puts it in the default worker image, so a trial can
run '-a tbh' without a per-run --harbor override.

Verified against the new pin: the agent resolves through AgentFactory,
'meta/striking_tomcat172' routes to the meta queue key and allowlists
api.ai.meta.com, and the class answers the restricted-network capability
hook (declaring its hosts when service_hosts is set, failing closed when
it is not).

Co-authored-by: Cursor Agent <cursoragent@cursor.com>

Author: RishiDesai

backend/uv.lock

@@ -151,9 +151,9 @@ def nop_oracle_kind(agent: str | None) -> str | None:
 # trials run a heavier GKE-enabled Harbor on a dedicated blessed-variant image
 # (see HARBOR_VARIANTS in oddish.core.harbor_source), never this default.
 HARBOR_DEFAULT_SOURCE = "https://github.com/abundant-ai/harbor"
-# abundant-ai/harbor main, as resolved into both uv.lock files. Harbor PR #11
-# (container-native k3s startup hardening) merged as this commit.
-HARBOR_DEFAULT_SHA = "d72243440dcdf7ddac4a9e0829a8bd58aabff64c"
+# abundant-ai/harbor main, as resolved into both uv.lock files. Harbor PRs #12
+# and #13 (the tbh agent) merged as this commit.
+HARBOR_DEFAULT_SHA = "12e1e055d5b5865a0c366e6b5acb62f548dc8775"
 
 _HARBOR_URL_PREFIXES = ("git+", "http://", "https://", "ssh://")