fix: bind SafeGate submission to public review source

[Nurexen-Labs]

This follow-up updates only the SafeGate submission provenance fields required by the X-Agent online validator.

Changes:

• sourceRepository -> https://github.com/Nurexen-Labs/safegate-xagent-commerce-outcome-public
• reviewCommit -> e9201dd4f79a99da71e14baa11eaf87e1831ea2d

The public-safe verifier source is available at that commit.

The live deployment is already bound to the same review commit:

• https://safegate-xagent-commerce-outcome.vercel.app/health
• https://safegate-xagent-commerce-outcome.vercel.app/.well-known/xagent-verification.json

No submitted source files, capability behavior, API URL, health URL, deployment-proof URL, private SafeGate core, secrets, or payment behavior are changed by this PR.

[github-actions]

Submission received — #87

Thank you for submitting to the current X-Agent MCP Hackathon. We have received your pull request.

This is a receipt only. It does not confirm eligibility, completeness, technical approval, a judging result, or an award. Passing automated checks or merging code for archival purposes does not, by itself, mean the entry has passed review or won a prize.

Please include the complete source for the submitted capability in this repository under submissions/mcp-hackathon/<slug>/source/, with dependency files, configuration examples, and reproducible setup/build instructions. An external repository link alone is not sufficient. The official copy is intended to remain available if the original repository later becomes unavailable. Do not include secrets, credentials, or private user data; clearly disclose external and private-service dependencies.

The automated checks report technical checks separately. A workflow failure is not a judging decision. Keep updates in this PR while submissions remain open, and keep the documented source version and deployment evidence consistent.

See the submission instructions. Final review results and awards will be announced separately through the official event channels.