Align release manifest and evidence

Co-authored-by: alfonso-aft <289616620+alfonso-aft@users.noreply.github.com>

Author: ualtinok

docs/v0.49-release-evidence.json

@@ -1,7 +1,7 @@
 {
   "artifact_id": "ART-V049-S6-ACTIVATION-EVIDENCE-001",
   "artifact_version": "0.49.0",
-  "source_commit": "a80e20eb9462bb71603bc72fa95a0d6f8241d14c",
+  "source_commit": "18671c3acbf12d5e544fe3dcf48ee5345b4dd565",
   "previous_version": "0.48.1",
   "candidate_version": "0.49.0",
   "capture_rule": "Each prefix and generated-subc value is a complete byte snapshot. A valid profile has exactly old -> candidate and no mixed snapshot.",

docs/v0.49-release-manifest.json

@@ -3,7 +3,7 @@
   "artifact_id": "ART-V049-S6-RELEASE-MANIFEST-001",
   "artifact_version": "0.49.0",
   "manifest_id": "MAN-V049-S6-RELEASE-001",
-  "source_commit": "a80e20eb9462bb71603bc72fa95a0d6f8241d14c",
+  "source_commit": "18671c3acbf12d5e544fe3dcf48ee5345b4dd565",
   "source_surface_manifest": "docs/v0.49-agent-surface-manifest.json",
   "distribution_manifest": "MAN-V049-DISTRIBUTION-ARTIFACTS-001",
   "hash_rule": "Hash exact UTF-8 bytes and binary bytes; do not normalize newlines, reserialize JSON, or use test-only normalization.",