chore: bump TechEngine submodule to bc86016

This brings in GetTechAPI/TechEngine#130. ingest.yml, refresh.yml and
verify-promote.yml now run with a read-only token and never push or
open a PR. A run commits locally, gates the result and uploads the
commit as collect.patch, with pr-body.md and pr.json, in a
collect-<task> artifact. Its export check lists both sides of a
rename, so a rename can't hide a file it removes outside data/.

collect.yml's three `uses:` move to the same commit. Only those three
workflows and the docs changed; the validator and the dump code
didn't. The next commit drops collect.yml's write permissions to match.

Refs #297

Author: Seungpyo1007

.github/workflows/collect.yml

@@ -70,7 +70,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: GetTechAPI/TechEngine/.github/workflows/ingest.yml@dc6d07e26cc49134f1cab5a962231735786b4b72 # main, TechEngine #129
+    uses: GetTechAPI/TechEngine/.github/workflows/ingest.yml@bc86016d7e4dc66e9c6204783aaa6e57d426bedf # main, TechEngine #130
     with:
       category: ${{ inputs.category }}
       limit: ${{ inputs.limit }}
@@ -83,7 +83,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: GetTechAPI/TechEngine/.github/workflows/refresh.yml@dc6d07e26cc49134f1cab5a962231735786b4b72 # main, TechEngine #129
+    uses: GetTechAPI/TechEngine/.github/workflows/refresh.yml@bc86016d7e4dc66e9c6204783aaa6e57d426bedf # main, TechEngine #130
     with:
       sleep: ${{ inputs.sleep }}
 
@@ -94,7 +94,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: GetTechAPI/TechEngine/.github/workflows/verify-promote.yml@dc6d07e26cc49134f1cab5a962231735786b4b72 # main, TechEngine #129
+    uses: GetTechAPI/TechEngine/.github/workflows/verify-promote.yml@bc86016d7e4dc66e9c6204783aaa6e57d426bedf # main, TechEngine #130
     with:
       apply: ${{ inputs.apply }}
       max_urls: ${{ inputs.max_urls }}