fix: #3622267 Point the header at the component versions the recipe ships

Issue: https://www.drupal.org/i/3622267

A fresh RightUp install on Drupal CMS exits 0, but every front-end page answers HTTP 500. canvas.page_region.vartheme_bs5_rightup.header pins two components to versions that no shipped component config declares, so Canvas throws OutOfRangeException in VersionedConfigEntityBase::assertVersionExists() on every page that renders the header.

Changes

• Header: icon-toggle is repointed from 1fabce12570a28f0 to ab1b678dc1806d89, and button from 89760b927a14a505 to 7c8b7b626a4fbd83. These are the active versions the recipe's own component configs ship; every other shipped tree already uses them.
• Ship canvas.component.sdc.vartheme_bs5_rightup.offcanvas-menu: the header uses this component, but the recipe did not ship its config, so its version depended on install-day hashing of the theme's code.
• CHANGELOG entry under Unreleased.

Verification

A fresh DDEV project, built with ddev composer create-project drupal/cms, ddev composer require drupal/rightup:1.0.x-dev and ddev drush si -y ../recipes/rightup, with this branch's recipe in recipes/rightup and no cache rebuild:

	Before	After
drush si	exit 0	exit 0
/, /features, /blog, /about-varbase, /contact-us, /user/login, /search	HTTP 500	HTTP 200
Component instances with an unavailable version	2 of 503	0 of 503

Checkpoints

• File an issue
• Addition/Change/Update/Fix
• Testing to ensure no regression
• Automated unit/functional testing coverage
• Developer Documentation support
• User Guide Documentation support
• UX/UI designer responsibilities
• Accessibility and Readability
• Reviewed by a human
• Code review by maintainers
• Full testing and approval
• Credit contributors
• Review with the product owner
• Update Release Notes
• Release

AI-Generated: Yes

🤖 Generated with Claude Code