test(runtime): pin managed mutation argument authority

[zhiiw]

Summary

Pins the managed mutation argument authority at the Runtime boundary and records the post-Gitoxide recovery extraction ledger.

Primary invariant: after T1, the workspace owner may canonicalize only the target path; it cannot replace Write/Edit content or transform arguments already bound to the durable call.

Owner: ToolRuntime argument authority.
Atomic boundary: durable T1 argument identity.
Failure state: malformed or broadened owner input fails closed before mutation execution.
Rollback: no side effect has occurred at this slice boundary.

Depends on apache#3741 and apache#3857. The branch will be rebuilt from main after both prerequisites merge.

中文说明

本切片固定 managed mutation 的参数权限边界，并记录 Gitoxide 恢复路线的提取账本。T1 之后 workspace owner 只能返回 canonical path，不能替换已经由 durable call 绑定的 Write/Edit 内容或转换参数。依赖 apache#3741 和 apache#3857，二者合并后会从最新 main 重建并收缩差异。

[zhiiw]

Superseded by the rebuilt delivery stack #40 -> #41 -> #42. This extraction PR remains available as implementation and review history; no validated logic was discarded.

中文说明

该 extraction PR 已由从最新 main 重建的组合交付栈 #40 → #41 → #42 替代。这里仍保留实现与审查历史，已验证逻辑没有被丢弃。