fix(hub-setup): switch Identity from pinned 8.8.0-alpha7 to SNAPSHOT

The SNAPSHOT version is now compatible with Keycloak 26.3.3 and correctly
initialises the camunda-platform realm. Defaulting to SNAPSHOT keeps Identity
in sync with the rest of camunda-hub's dependencies automatically.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: esraagamal6

docker/docker-compose.hub.yml

@@ -6,8 +6,8 @@
 #
 # All host ports are configurable via env vars — set them in a .env file or export them
 # before running docker compose to resolve conflicts with other local stacks.
-# Identity and Keycloak are pinned to match camunda-hub/docker-compose.sm-keycloak.yml.
-# WebSockets defaults to SNAPSHOT (pull_policy: if_not_present); set PULL_POLICY=always to refresh.
+# Keycloak is pinned to match camunda-hub/docker-compose.sm-keycloak.yml.
+# Identity and WebSockets default to SNAPSHOT (pull_policy: always); set PULL_POLICY=if_not_present to skip pulls.
 
 services:
   modeler-db:
@@ -81,8 +81,8 @@ services:
       start_period: 15s
 
   identity:
-    image: ${IDENTITY_IMAGE:-camunda/identity:8.8.0-alpha7@sha256:96308c370b684d180b998c622d72d0a9e7690cf0e6888c8e287f70534f706597}
-    pull_policy: ${PULL_POLICY:-if_not_present}
+    image: ${IDENTITY_IMAGE:-camunda/identity:SNAPSHOT}
+    pull_policy: ${PULL_POLICY:-always}
     depends_on:
       identity-db:
         condition: service_healthy