Vector's recorded sourceHash in bots/index.json doesn't match its checked-in source

[flemming-n-larsen]

Summary

`bots/python/Vector`'s entry in `bots/index.json` has a `sourceHash` that no longer matches the actual checked-in source at `bots/python/Vector/src/Vector.py` (same `version`). This means a full repo-wide validation run fails on current `main`:

```
$ python scripts/validate_bot.py --root . --owner
validation failed: bot Vector changed source without increasing its version
```

Reproduction

Confirmed on a fresh clone of `main` as of 2026-09-04 (after PRs #5, #6, #7 merged, so not caused by those):

```
$ python scripts/validate_bot.py --root . --owner flemming-n-larsen
validation failed: bot Vector changed source without increasing its version
```

The per-bot smoke/structure checks all pass individually; the failure is specifically `check_governance`'s hash comparison against `bots/index.json`.

Expected

Either:

• `Vector`'s version should be bumped to match its current source (if the source was legitimately changed after the catalog was last generated), or
• `bots/index.json` should be regenerated via `validate_bot.py --generate` to record the current, correct hash (if the catalog just drifted).

Either way, a clean checkout of `main` should pass `validate_bot.py --root . --owner ` without needing `--generate` first, since that's the baseline every new submission's CI run depends on.

Context

Found while validating three new Java bot submissions (#5, #6, #7); unrelated to those PRs, which only touch `bots/java/**`.

🤖 Generated with Claude Code

https://claude.ai/code/session_01A2CS5LTRShejMcfuWrGh1H

[flemming-n-larsen]

Fixed by 9632a0e ("fix: bump Orbit/Vector versions to resolve stale catalog hash"), pushed directly to main. A repo-wide validation run now passes cleanly:

$ python scripts/validate_bot.py --root . --owner
validated 5 bot(s)

Tracked as done under Tank Royale's P-004/M-013.