Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag

artifact-manifest.json is generated from the FLAG injected at startup. Verify each data SHA-256, XOR-decrypt with SHA-256(name), and join to recover the flag.
Inspect artifact-manifest.json and identify the target record
verify each data SHA-256, XOR-decrypt with SHA-256(name), and join
Verify that the reconstructed value has FLAG{...} format