fix(bot): use archived classic dependency URLs

[zoeyrose]

Summary

• point the Classic bot's v1.0.9 protocol wheel at its actual archived release repository
• point the fallback libatrinik v1.1.5 source at its actual archived release repository
• keep the immutable versions and SHA-256 pins unchanged
• document the boundary between archived Classic bindings and the replacement protocol repository

Why

The pre-rename URLs currently work only through GitHub redirects. The fresh atrinik/protocol repository has no v1.0.9 release, so the bot dependency is not self-describing and would fail if redirects disappear.

Validation

• downloaded and verified atrinik_protocol-1.0.9-py3-none-any.whl (78954264fa49ac8736dbfc7a72669f619e0202e6ae15445a0b0839aa8f30eb8a)
• configured CMake through the corrected archived libatrinik v1.1.5 URL and checksum
• built the native pathfinding adapter with strict warnings
• CTest: 1/1 passed
• bot regression: 418 tests passed against collected Classic content
• actionlint .github/workflows/check.yml
• python3 -W error -m compileall -q -f atrinik_bot
• TOML/dependency-coordinate parse
• git diff --check

Runtime topology verification is not applicable to this immutable dependency-coordinate correction.