feat(resume): retain principal on tracked resume

[zane668]

Implements the tracked-resume portion of #87.

Depends on #92. Until #92 lands, this stacked draft intentionally includes the durable principal foundation commits; after #92 merges it will be rebased so only the tracked-resume delta remains.

Scope:

• retain the same principal only for tracked hcom resume
• keep fork, adoption, vanilla resume, and explicit name reclaim fresh
• require lifecycle-consistent stopped evidence for row-gone recovery
• reject missing, split, tied, or raced identity evidence instead of guessing
• bind resume reservations to the launching process so stale cleanup cannot claim or delete a later lifecycle

Validation:

• 1999 unit tests and 22 CLI tests pass
• focused resume and deterministic interleaving regressions pass
• fmt, clippy with warnings denied, and diff checks pass
• the old v18 binary can read the new stopped-event payload and preserves durable bindings

Closes #87

[zane668]

CI triage: the three failing jobs are the same upstream-main baseline failures isolated in #91, not P2 regressions. Both rust-tests and windows-build stop on the pre-existing redundant &entry.timestamp clippy error; release plan stops because the generated cargo-dist workflow is stale. All six real-tool jobs and typecheck passed on this stacked draft. After #91 and #92 land, this branch will be rebased and rerun as the single P2 delta.