Dockerfile: bump CADGENBENCH_SHA to 36ac6b4 (Hub-aware paths.py)

cadgenbench commit 36ac6b4 adds the Hub-dataset resolution branch to
common/paths.py (snapshot_download from $CADGENBENCH_DATA_REPO /
$CADGENBENCH_DATA_GT_REPO when set, falling back to the existing
local/bundled chain otherwise).

The Space's Settings variables CADGENBENCH_DATA_REPO and
CADGENBENCH_DATA_GT_REPO are set in lockstep with this bump
(HuggingAI4Engineering/cadgenbench-data and
HuggingAI4Engineering/cadgenbench-data-gt respectively), so the
runtime now resolves fixtures from the Hub dataset repos instead of
the wheel-bundled fallback.

GT dataset is private; the existing HF_TOKEN Space secret provides
read access (already set during Step 5 for the submissions dataset).
No new secret required.

Dockerfile

@@ -44,7 +44,7 @@ RUN pip install --no-cache-dir playwright \
 
 # cadgenbench from the Public GitHub repo, pinned to a commit. Bumping
 # CADGENBENCH_SHA is the one-line path to picking up a new cadgenbench.
-ARG CADGENBENCH_SHA=4ad7487
+ARG CADGENBENCH_SHA=36ac6b4
 RUN pip install --no-cache-dir \
         "cadgenbench @ git+https://github.com/huggingface/cadgenbench.git@${CADGENBENCH_SHA}"