feat(lab): install sealed component adapters

src/k1link/observatory/portable_lab_v1_local_runners.py

@@ -793,6 +793,7 @@ class InstalledPortableLabV1EomtRunner:
         try:
             request = _component_request(
                 component="eomt",
+                component_image_sha256=component.image_sha256,
                 source=source,
                 plan=plan,
                 assets=component.assets,
@@ -854,6 +855,7 @@ class InstalledPortableLabV1DdrnetRunner:
         try:
             request = _component_request(
                 component="ddrnet",
+                component_image_sha256=component.image_sha256,
                 source=source,
                 plan=plan,
                 assets=component.assets,
@@ -1022,14 +1024,17 @@ def _prepare_invocation(
 def _component_request(
     *,
     component: PortableLabV1Component,
+    component_image_sha256: str,
     source: PortableLabV1MaterializedSource,
     plan: PortableLabV1OrchestrationPlan,
     assets: tuple[PortableLabV1HostAsset, ...],
     effective_config_sha256: str | None,
 ) -> dict[str, object]:
+    _digest(component_image_sha256, "component request image sha256")
     return {
         "schema_version": PORTABLE_LAB_V1_COMPONENT_REQUEST_SCHEMA,
         "component": component,
+        "component_image_sha256": component_image_sha256,
         "plan_sha256": plan.plan_sha256,
         "definition_sha256": plan.definition_sha256,
         "release_candidate_sha256": plan.release_candidate_sha256,