Pin OpenClaw release v2026.4.8

What:
- pin gateway source to the v2026.4.8 release commit
- pin the macOS app to OpenClaw-2026.4.8.zip
- regenerate generated config options from the same release source

Why:
- recover onto one recent release line instead of a stale February pin
- keep source, app, and generated schema in sync

Tests:
- nix build .#openclaw-gateway --accept-flake-config (resolved pnpmDepsHash; later clean rerun blocked by transient Garnix 504s)
- nix build .#openclaw-app --accept-flake-config
- nix shell --extra-experimental-features 'nix-command flakes' nixpkgs#nodejs_22 nixpkgs#pnpm_10 -c bash -c 'cd <release-source> && pnpm install --frozen-lockfile --ignore-scripts && OPENCLAW_SCHEMA_REV=abe7b2c49da95a47fc0fc01661cec9bfed6941fc pnpm exec tsx nix/scripts/generate-config-options.ts --repo . --out nix/generated/openclaw-config-options.nix'

nix/packages/openclaw-app.nix

@@ -6,11 +6,11 @@
 
 stdenvNoCC.mkDerivation {
   pname = "openclaw-app";
-  version = "2026.3.13-beta.1";
+  version = "2026.4.8";
 
   src = fetchzip {
-    url = "https://github.com/openclaw/openclaw/releases/download/v2026.3.13-beta.1/OpenClaw-2026.3.13.zip";
-    hash = "sha256-V2raRMaD0dzBgJNaV6JEbaihuOu0GIUWdEnyzNxJefg=";
+    url = "https://github.com/openclaw/openclaw/releases/download/v2026.4.8/OpenClaw-2026.4.8.zip";
+    hash = "sha256-MD7cL0ONDyiU17DB1RDbkuBKBJw36NlQemoFRwxbcfA=";
     stripRoot = false;
   };
 

nix/sources/openclaw-source.nix

@@ -2,7 +2,7 @@
 {
   owner = "openclaw";
   repo = "openclaw";
-  rev = "823a09acbefc893f4ca143d90898b41a482c7a36";
-  hash = "sha256-GMpKjPiwgM4bUC1a0a8xV8sujO/6AsgLdXMKdvqrlps=";
-  pnpmDepsHash = "sha256-NcQZmaOny8eBB/z3FheDjYm3++lee5CujCGByLG/aHU=";
+  rev = "abe7b2c49da95a47fc0fc01661cec9bfed6941fc";
+  hash = "sha256-Y9FvI6Vhyi+kBLVio7/Qz77NWBViYMD0KheV7cXyeXs=";
+  pnpmDepsHash = "sha256-GrGh7rACPl+eROOOBYzneWJxl+xsh39/m2+dNI01oaQ=";
 }