chore: align QPK pin to accepted 9618b4bd revision

[Pigbibi]

Scope

• align repo-native QuantPlatformKit dependency declarations and generated lock from 2f75b592... to accepted 9618b4bd...
• align compatibility and mandate provenance test identities
• no strategy behavior, mandate semantics, runtime manifest, provider, deploy, or live changes

Validation

• tests-first RED: compatibility test rejected the old declaration
• focused: 17 passed
• full: 531 passed, 347 subtests passed
• dependency-enabled uv sync --locked; pip check: no broken requirements
• installed QPK direct URL requested revision and commit: 9618b4bd8e179760ac174914713598762cab15d7
• uv lock --check, Ruff, actionlint, compileall, sdist/wheel build, diff/scope/secret gates: PASS

All tests are offline/synthetic; no provider/API/credential/real-bar/backtest/runtime/live/deploy action was performed.

[Pigbibi]

Required CI is blocked by the canonical QuantPlatformKit QPK_PIN, which remains 2f75b592... on QPK main 9618b4bd.... The QPK post-merge pin-update run failed aggregate dependency closure before creating a pin PR. Advancing that canonical pin or changing this repository CI authority is outside this exact UES pin/lock write set, so this PR is closed unmerged and parked fail-closed.