release(v1.36.22): consensus v1.36.7 -> v1.36.7-hotfix.1 (G9 fix) + EVM plugin v1.104.9-hotfix.2

Folds BOTH flag-day fixes onto the v1.36.17 audited base:
- go.mod consensus v1.36.7 -> v1.36.7-hotfix.1: the G9 rejoin fix — reconcile the VM to
  the certified block instead of log.Crit/os.Exit killing a healthy validator on a stale
  lower-cert refusal; fail-closed ONLY on a genuine two-certified-at-one-height
  double-finalization (consensus/engine/chain reconcileVMToCertified + PreferenceReconciler,
  +orphan_reconcile_test.go). v1.36.7-hotfix.1 = v1.36.7 + ONLY that fix (correct lineage;
  the pre-existing v1.36.8 is main+fix and behind v1.36.7). MVS-verified selected.
- Dockerfile EVM_VERSION v1.104.9 -> v1.104.9-hotfix.2: the C-Chain startup RLP-import
  consensus-refresh + idempotency fix (unchanged from v1.36.21).

Node source = v1.36.17 tag (d83191e286); only these 3 lines differ (Dockerfile + go.mod +
go.sum). The G9-fix is the ONLY consensus-binary change vs the v1.36.21 image.

Co-authored-by: Hanzo Dev <dev@hanzo.ai>

Dockerfile

@@ -265,7 +265,7 @@ RUN . ./build_env.sh && \
 # and EVERY EVM chain (C + L2s hanzo/zoo/pars/spc, all mgj786) fails to
 # initialize. The api bump is code-free for plugins (chains v1.7.4->v1.7.5
 # adopted it with a go.mod-only diff), so v1.104.9 = v1.104.8 + api alignment.
-ARG EVM_VERSION=v1.104.9
+ARG EVM_VERSION=v1.104.9-hotfix.2
 ARG EVM_VM_ID=mgj786NP7uDwBCcq6YwThhaN8FLyybkCa4zBWTQbNgmK6k9A6
 # the pinned evm go.mod may pin a dead luxfi/upgrade pseudo-version
 # (v1.0.1-0.20260603055252-f51810805436 — commit pruned from origin). Heal it to

go.mod

@@ -26,7 +26,7 @@ require (
 	github.com/huin/goupnp v1.3.0
 	github.com/jackpal/gateway v1.1.1
 	github.com/jackpal/go-nat-pmp v1.0.2
-	github.com/luxfi/consensus v1.36.7
+	github.com/luxfi/consensus v1.36.7-hotfix.1
 	github.com/luxfi/crypto v1.20.2
 	github.com/luxfi/database v1.21.1
 	github.com/luxfi/ids v1.3.2

go.sum

@@ -315,6 +315,8 @@ github.com/luxfi/compress v0.1.1 h1:cQjRYQFRrw8HinjW1T8FmKgqdRwrFYDCdecc1t0i+uQ=
 github.com/luxfi/compress v0.1.1/go.mod h1:d4CkRRmwPzafIp57Jxra3RmAmNwNwU8Oc0QBBRlTqGo=
 github.com/luxfi/concurrent v0.1.1 h1:LkAmNXybOsAm97nFILqMDBp/YLgleuLmyGomFT7YNxU=
 github.com/luxfi/concurrent v0.1.1/go.mod h1:GlkfiJtPBpatNxvROf7hkPi4gsnmdHGmqhDnVWFrkZE=
+github.com/luxfi/consensus v1.36.7-hotfix.1 h1:aOoOkaMGezbJVTYsa54JdEyHe5qZFO8cV31U5KpZE3E=
+github.com/luxfi/consensus v1.36.7-hotfix.1/go.mod h1:m4aMFbKYxwM2X4oPYRjq4LmDSShfCgAHnhmxIGKDyFU=
 github.com/luxfi/consensus v1.36.7 h1:ijJh/4sl1Y65ziUFsQJa2DLwnAhb1h/c72FHybEXKps=
 github.com/luxfi/consensus v1.36.7/go.mod h1:m4aMFbKYxwM2X4oPYRjq4LmDSShfCgAHnhmxIGKDyFU=
 github.com/luxfi/constants v1.6.2 h1:pXHdKIFbfE9qX4xOjq2LxYvagNhhNvspUVEbPcIEKfA=