deps(runner): bump claude-agent-sdk 0.2.124, anthropic 0.117.0 (#1720)

## SDK Version Bump

- `claude-agent-sdk`: 0.2.120 -> 0.2.124
- `anthropic`: 0.116.0 -> 0.117.0

### TL;DR

- 3 behavior change(s) to review
- 2 new feature(s), 5 bug fix(es)

## Behavior Changes

| Change | Package | Version | Action |
|--------|---------|---------|--------|
| **Hardened build scripts against command injection via
`CLAUDE_CLI_VERSION`** | `claude-agent-sdk` | 0.2.121 | Review |
| **CI now lints and typechecks `scripts/` alongside `src/` and
`tests/`** | `claude-agent-sdk` | 0.2.121 | Review |
| **CI CLI install steps now fail properly when `curl` errors (added
`shell: bash...** | `claude-agent-sdk` | 0.2.121 | Review |

<details><summary><strong>New Features</strong> (2)</summary>

| Feature | Package | Version | Claude | Gemini | Default | Action |
|---------|---------|---------|--------|--------|---------|--------|
| **add support for dreaming** | `anthropic` | 0.117.0 | - | - |
Available | Review |
| **add support for MCP Tunnels** | `anthropic` | 0.117.0 | Yes | - |
Available | Review |

</details>

<details><summary><strong>Bug Fixes</strong> (5)</summary>

- **Refused batch script CLI spawning on Windows** (`claude-agent-sdk`
0.2.124): Blocked spawning `.bat`/`.cmd` CLI scripts (including npm's
`claude.cmd` shim) on Windows to prevent command injectio...
- **Windows cmd.exe metacharacter rejection** (`claude-agent-sdk`
0.2.124): `resume` and `session_id` values containing cmd.exe
metacharacters (`& | < > ^ % ! "`) or newlines now raise `ValueEr...
- **Dash-prefixed `extra_args` value binding** (`claude-agent-sdk`
0.2.124): `extra_args` now uses `--flag=value` form when the value
starts with `-`, preventing a dash-leading value from being...
- **Fixed argv flag injection via `resume` and `session_id` options**
(`claude-agent-sdk` 0.2.121): `--resume` and `--session-id` are now
passed as single `=`-joined argv tokens (e.g. `--resume=<value>`) so
that a das...
- **credentials** (`anthropic` 0.117.0): keep credential material out of
traceback frame locals via SecretStr

</details>

<details><summary><strong>Bundled Claude CLI Versions</strong>
(4)</summary>

| SDK Version | CLI Version |
|-------------|-------------|
| 0.2.124 | 2.1.216 |
| 0.2.123 | 2.1.215 |
| 0.2.122 | 2.1.214 |
| 0.2.121 | 2.1.212 |

</details>

<details><summary>Internal changes: <code>claude-agent-sdk</code>
(4)</summary>

- Updated bundled Claude CLI to version 2.1.216 (0.2.124)
- Updated bundled Claude CLI to version 2.1.215 (0.2.123)
- Updated bundled Claude CLI to version 2.1.214 (0.2.122)
- Updated bundled Claude CLI to version 2.1.212 (0.2.121)

</details>

---
_Automated by `.github/workflows/sdk-version-bump.yml`_

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

Author: github-actions[bot]

components/runners/ambient-runner/pyproject.toml

@@ -23,8 +23,8 @@ dependencies = [
 
 [project.optional-dependencies]
 claude = [
-  "anthropic[vertex]>=0.116.0",
-  "claude-agent-sdk>=0.2.120",
+  "anthropic[vertex]>=0.117.0",
+  "claude-agent-sdk>=0.2.124",
 ]
 observability = [
   "langfuse>=3.14.5",