chore(acp): sync verified registry pins

[CleverC2200]

Closes CleverC2200/AionUi#123

Summary

• bump @google/gemini-cli from 0.3.17 to 0.3.18
• bump @vscode/grok from 1.0.7 to 1.0.8
• bump @nova/acp from 1.1.35 to 1.1.37
• preserve the existing ACP registry contract and change only the verified version pins

Upstream reference: iOfficeAI#921 (199fedc3).

Validation

• jq empty crates/aionui-runtime/assets/acp-registry.json
• outgoing version search under crates/**/*.rs: no matches
• cargo fmt --all -- --check
• cargo clippy -p aionui-runtime -- -D warnings
• just push -u personal codex/core-acp-pins with shared CARGO_TARGET_DIR: 9,111/9,111 executed tests passed

Baseline exceptions

• Migration guard requires AIONCORE_ALLOW_MAIN_MIGRATION_EDIT=1 because personal main contains the official 040_sidebar_ordering_and_archive.sql content, byte-identical, renumbered as 047; this PR changes no migration.
• aionui-app::midturn_e2e midturn_send_returns_200_with_the_active_turn_id was excluded from the final nextest run after two full-gate failures. The same nextest test fails on untouched personal/main with 409, while the isolated Cargo test passes. This PR changes registry JSON only.