chore: activate final coordinated component lock

[dajiaohuang]

Summary:

• align Web shared, profile, and component pins with the Agent 2026.8.30-mcp-modern-final release lock
• update Compose, environment examples, English/Chinese README tables, and hosted Agent contract fixture
• pin CoC to verified ancestor eebab098; later main work is intentionally outside this compatibility set

Validation:

• full pytest suite
• focused component/audit/Agent contract tests
• strict remote build-component audit: 5/5
• Compose and observability configuration validation
• Ruff, diff check, and credential-pattern scan