test(ci): align fixtures with runtime and evidence contracts

Restore test fixture runtime prerequisites and align assertions with current Evidence and uncertainty contracts. Separate actual CLI publisher refusal from explicitly admitted Hopper socket/CLI fixtures, retaining exact wire identity and cleanup coverage. Validate retained EVM Evidence against exact unchanged source-carrier bytes.

Validation: 88 targeted local test passes across three completed selections, two platform skips, full check:ci; hosted Windows probes and complete current-head CI. No production authority, authentication or schema change. Controlled fixtures do not qualify actual disassemblers or workers.

Fixes #4690.

tests/boundary/filesystem/javascript-applications/javascriptModuleRelationships.test.ts

@@ -82,7 +82,7 @@ it.each([
 );
 
 describe("cross-version source module identity", () => {
-  it("keeps a source module unchanged when only a sibling file changes", async () => {
+  it("keeps exact source identity without claiming unchanged unresolved relationships", async () => {
     const root = await createTestTempDirectory("rea-source-module-sibling-");
     const versions = await Promise.all(
       ["left", "right"].map(async (name) => {
@@ -129,12 +129,11 @@ describe("cross-version source module identity", () => {
       rightNativeEvidence: [],
     });
 
-    expect(
-      comparison.items.find(
-        ({ left_node_id }) => left_node_id === leftModule.node_id,
-      ),
-    ).toMatchObject({
-      status: "unchanged",
+    const item = comparison.items.find(
+      ({ left_node_id }) => left_node_id === leftModule.node_id,
+    );
+    expect(item).toMatchObject({
+      status: "unknown",
       right_node_id: rightModule.node_id,
       match: {
         status: "matched",
@@ -142,6 +141,15 @@ describe("cross-version source module identity", () => {
         confidence: "exact",
       },
     });
+    expect(item?.dimensions).not.toContain("content");
+    expect(item?.dimensions).not.toContain("properties");
+    expect(item?.limitations).toEqual(
+      expect.arrayContaining([
+        expect.stringMatching(
+          /Incomplete graph coverage|Relationship target identity remains unresolved/,
+        ),
+      ]),
+    );
   });
 });