fix: use published industrial example deps

[carloshvp]

Summary

• replace the industrial embodied AI git dependency pins with the published compatible package releases
• use cmcp-runtime==0.2.1, which depends on agent-manifest>=0.1.1, avoiding the conflicting direct git refs from the merged feat(industrial-embodied-ai): bind controller execution receipts (#29) #32 workflow

Root cause

The post-merge industrial-embodied-ai CI job failed while installing artifact validation dependencies because requirements.txt pinned agent-manifest to one git commit while the pinned cmcp-runtime commit depended on a different agent-manifest git commit. cmcp-runtime 0.2.1 now uses the PyPI agent-manifest>=0.1.1 dependency from agentrust-io/cmcp#336, so the published packages resolve cleanly together.

Validation

• python -m pip install cryptography
• python -m unittest discover -s tests -v
• python -m pip install -r requirements.txt
• python validate_artifacts.py
• JSON validation across repository
• YAML validation across repository

[github-actions]

🟡 Contributor Check: MEDIUM

Check	Result
Profile	LOW
Credential	MEDIUM
Overall	MEDIUM

Automated check by AGT Contributor Check.

[carloshvp]

Ready for review.

This fixes the red industrial-embodied-ai CI after #32 by replacing the conflicting git dependency pins with the published compatible package releases from the latest cMCP/Agent Manifest publishing flow.

Validated locally and in CI:

• validate: pass
• industrial-embodied-ai: pass
• gate: pass
• check: pass