release: promote activity-core b186746 image to api and worker

Pin actcore-api and actcore-worker to
git-b186746f4a92f9385c16a3c298e27739fa8271a4
(sha256:2f5084655463294ef2f8e8251f4ef16db049dcbba488da1e700f2fdacca7362a),
carrying the /release/health probe fix (b186746,
ACTIVITY-WP-ADHOC-2026-10-19-T03). Founder-approved 2026-10-20.
Build-and-push run 434 succeeded. event-router stays on sha256:cd4e924c.
Image fields only; no migrations. custodian_capture.py (9ef75e0) ships in
the image but is not imported or wired anywhere. Rollback: Argo revision
8884b123, api/worker sha256:08966e8d.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 244572@bnt-lap001
Assistant-Session: 3b235e1a-ae45-4d0f-ae70-17a9bd78ece8

k8s/gitops/runtime.yaml

@@ -1709,7 +1709,7 @@ spec:
             name: actcore-runtime-config
         - secretRef:
             name: actcore-runtime-secret
-        image: forgejo.coulomb.social/coulomb/activity-core@sha256:08966e8dd976d2e6f50711f33b2ab0abaa650aed998b28d743483999729e7d66
+        image: forgejo.coulomb.social/coulomb/activity-core@sha256:2f5084655463294ef2f8e8251f4ef16db049dcbba488da1e700f2fdacca7362a
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3
@@ -1804,7 +1804,7 @@ spec:
             name: actcore-runtime-config
         - secretRef:
             name: actcore-runtime-secret
-        image: forgejo.coulomb.social/coulomb/activity-core@sha256:08966e8dd976d2e6f50711f33b2ab0abaa650aed998b28d743483999729e7d66
+        image: forgejo.coulomb.social/coulomb/activity-core@sha256:2f5084655463294ef2f8e8251f4ef16db049dcbba488da1e700f2fdacca7362a
         imagePullPolicy: IfNotPresent
         name: worker
         ports: