Update agent-loop to 0.16.6 and keep replay provenance in sync - abandoned

[renovate]

What changed

• update the repository-local dogfood tool from voku/agent-loop 0.16.5 to 0.16.6
• update each replay input's direct agent_loop_release provenance to the same release
• teach Renovate to manage toolchain.agent_loop_release in dogfood issue-*.json files as the same Packagist dependency
• group Composer and replay-provenance updates for voku/agent-loop
• stop copying the concrete agent-loop version into the README

Why

The dogfood verifier intentionally requires the replay input and the repository-local Composer tool project to agree on the direct agent-loop release. A normal Renovate Composer bump therefore left the PR deterministically red until the replay provenance was changed by hand.

The repository also now treats agent-loop as the single root authority for its sibling agent-* release set, so transitive packages such as agent-session must not be pinned independently here. Their resolved versions remain evidence, not another dependency authority.

This keeps the fail-closed replay contract while making the valid dependency update atomic in future Renovate PRs.

Validation

• normal CI and Agent Loop Real Issue Dogfood are triggered on the updated PR head
• verify-release-set.php remains unchanged and continues to enforce the ownership boundary
• PR Update dependency voku/agent-session to v0.6.1 - autoclosed #115 is intentionally obsolete after the sibling dependency pins were removed from the consumer root

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.