fix(prism): rent-permission fallback + public CUDA 13 pin

[echobt]

Summary

• Miner BYOK Lium keys 400 on private prism-recipe-v9 (f2f5e84c…) with "You don't have permission to rent this template."
• On that 400, provision retries the same offer with an account-rentable public template (official daturaai/pytorch CUDA 13 DIND 345273fa…).
• Prod compose pin updated off private v9. Private templates are no longer treated as public just because the name matches.

Test plan

• provision_retries_on_template_rent_forbidden (wiremock 400 → fallback rent 200)
• harness skips is_private: true v9 and picks official public pytorch
• loc-cap / clippy on touched crates
• live rent of executor 38a0b321 with 345273fa returned 200; pod terminated immediately
• prod master env applied: PRISM_POD_TEMPLATE_ID=345273fa-…, /health 200, no evil-gateway

[coderabbitai]

Warning

Review limit reached

@echobt, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 30 minutes

Limit details: You’ve used all 2 included reviews currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

Wait for the limit to reset, then comment @coderabbitai review or push new commits to the PR.

An organization admin can change what happens after included review limits in Billing.

How do review limits work?

CodeRabbit enforces per-developer PR review limits within each organization.

For paid Pro and Pro+ reviews, CodeRabbit uses a developer's included PR review attempts over the past 7 days to set the current hourly allowance. At typical activity levels, the full plan allowance applies. Higher sustained activity can lower the allowance until earlier attempts leave the 7-day window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 0ea21a60-0f87-4c75-8981-dd3d0eec7fb4

📥 Commits

Reviewing files that changed from the base of the PR and between a5557b6 and 2d2e4a6.

📒 Files selected for processing (8)

• crates/prism-lium-harness/src/lib.rs
• crates/prism-lium-types/src/json.rs
• crates/prism-lium-types/src/lib.rs
• crates/prism-lium/src/client.rs
• deploy/compose/env-prod.yml
• deploy/env/prism-challenge.env.example
• docs/PRISM.md
• docs/runbooks/prism-enable-lium-and-emission.md

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}