fix: update stability and frontier dependencies

[rjan90]

Summary

• Update the multi-copy scenario to install filecoin-pin@1.0.1.
• Update default dependency pins to Lotus v1.36.0, Curio v1.28.2, and filecoin-services v1.3.0.
• Pin the stability scenario workflow to Curio v1.28.2 instead of the stale latesttag:pdp/v* selector.

Verification

• Required PR CI is green: https://github.com/FilOzone/foc-devnet/actions/runs/27809239421
  • lint: pass
  • cargo-test: pass
  • default foc-devnet scenario run: pass
• Manual nightly stability validation passed 5/5: https://github.com/FilOzone/foc-devnet/actions/runs/27809240509/job/82295635141
• Previous manual frontier validation passed 5/5 with filecoin-pin@1.0.1: https://github.com/FilOzone/foc-devnet/actions/runs/27765742646

Closes #117
Closes #124

[rjan90]

CI notes from manual validation:

• Manual nightly run: https://github.com/FilOzone/foc-devnet/actions/runs/27765742646
• Frontier leg passed: 5/5 scenarios, including test_multi_copy_upload in 47s.
• Stability leg failed: 3/5 scenarios; test_multi_copy_upload passed, but storage/caching retrieval failed.
• PR pull_request CI quick checks passed (lint, cargo-test), but the default foc-devnet scenario job failed: https://github.com/FilOzone/foc-devnet/actions/runs/27765724447

So the filecoin-pin@1.0.1 + Lotus v1.36.0 branch does resolve the linked frontier multi-copy failure, but the PR is not currently green because the default/stability scenario configurations still fail on other storage-path errors.

[rjan90]

Update after the latest dependency changes:

• Required PR CI is now green: https://github.com/FilOzone/foc-devnet/actions/runs/27809239421
  • lint: pass
  • cargo-test: pass
  • default foc-devnet scenario run: pass
• Manual nightly validation: https://github.com/FilOzone/foc-devnet/actions/runs/27809240509
  • stability now passes 5/5 with Curio pinned to v1.28.2 and filecoin-services using latest v* tag
  • frontier is still running in this manual workflow as of this comment

This supersedes my earlier CI note where stability/default were still failing. The dependency updates appear to have fixed the default and stability scenario failures, and the original frontier filecoin-pin issue was already fixed by filecoin-pin@1.0.1.

[BigLep]

I'm worried about all the version pinning we're doing here. We want to be using latest releases by default or latest commits on master.