adopt core v0.17.0 and advertise deployment-composition-provenance/v1 #82

Why

The staging render of obin-ai/platform-obin (module documents) deploys through this agent and stops on it:

deployment requires agent capability deployment-composition-provenance/v1; upgrade the builder agent to one that judges request composition provenance

core v0.17.0 (codefly-dev/core#752) carries the rendering composition's membership on DeploymentRequest.composition_provenance and judges dependency edges with it inside DeployKustomize; the CLI (0.1.182) requires the live contract capability, and per core's docs/agent-contract.md each adopting agent advertises it itself. This agent is on an older core and advertises nothing.

What

1. codefly agent deps --pin v0.17.0 (CLI ≥ v0.1.182), then fix what the bump surfaces. The datastore agents' migrations are the pattern: services.IsRestrictedOutputProfile(p) → services.ParseOutputProfile(p) + .Restricted() behind one helper that reads an unknown profile as restricted; VisibilityExternal / VisibilityModule → private (exposure/location are separate axes now); any InitRequest/runtime-image change (core#749) if this is a container-only runtime. References: build(core)!: adopt core v0.16.0 — this agent was refusing other modules' renders service-redis#85, service-postgres#171, service-vault#67, service-clickhouse#23.
2. GetAgentInformation: advertisement.Contract = contract.Current() + append contract.DeploymentCompositionProvenance (core agents/contract), with a handler-read test — exactly feat(contract): advertise deployment-composition-provenance/v1 service-go-grpc#172.
3. agent.codefly.yaml source.agent → codefly.dev/go:0.0.69 (older Go packagers hardcode GOTOOLCHAIN=local and refuse the go 1.27.2 directive core lifts in).
4. No patch version in the go directive beyond what go mod tidy forces; do not use --skip-audit or GOFLAGS=-mod=mod.
5. codefly agent build must pass locally before the PR (the release's conformance gate tests the installed build).

One PR. Release follows merge (codefly agent build then codefly agent release).