fix(cli): require exact path roots

[andrei-hasna]

Summary

• keep generic --root resolution by name, path, or ID unchanged
• normalize --path and strict-match only configured root.path values
• map a successful path match to the exact root ID before querying
• reject root-name, root-ID, and existing-but-unconfigured path collisions

Remediation provenance

• task: 6a617d81-6cc9-4d8a-b771-c8fd105d3234 (OPE44-00004)
• replaces the defective change externally merged in PR fix(cli): accept --path for scoped find #10 despite its fixed reviewer NO_GO
• containment incident: conversations incident 688572
• remediation cycle 1 is limited to the named strict-path P1 and direct regressions

Verification

• red control: 3 pass, 1 fail, 24 expectations; root-name collision incorrectly exited 0
• path/collision control: 4 pass, 0 fail, 40 expectations
• affected CLI/resolver lanes: 70 pass, 0 fail, 213 expectations
• full Bun suite: 283 pass, 0 fail, 793 expectations
• typecheck and production build passed
• staged scan and commit-range scan passed

No version or changelog change is included; release child task 4bc7429c-8f26-442f-b0be-9d324a4c0f57 owns 0.0.16 after this source repair lands.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}