fix(inputs): centralize admission and preserve caller selections

Move shared request parsing into its application owner, migrate all consumers, and remove six duplicated admission blocks while preserving cancellation and validation policy.

Keep operator-selected JavaScript paths in verifier parent Evidence while retaining canonical comparison guards. Validated with 204 passing tests, 3 Linux-x64-only skips, typecheck, lint, and test discovery.

scripts/verify/javascript/application-workflows.mjs

@@ -42,8 +42,8 @@ const [leftPath, rightPath] = await Promise.all([
 if (leftPath === rightPath)
   throw new Error("--left and --right must resolve to distinct paths");
 const [left, right] = await Promise.all([
-  analyze(leftPath),
-  analyze(rightPath),
+  analyze(options.left),
+  analyze(options.right),
 ]);
 const comparison = compareApplicationVersionsEvidence({ left, right });
 if (!comparison.ok) throw comparison.error;

scripts/verify/javascript/runtime-observation.mjs

@@ -36,14 +36,8 @@ const requestedLayers = [
   ...options.cache.map((path) => ({ role: "cache", path })),
   ...options.assets.map((path) => ({ role: "assets", path })),
 ];
-const canonicalLayers = await Promise.all(
-  requestedLayers.map(async (layer) => ({
-    ...layer,
-    path: await realpath(layer.path),
-  })),
-);
 const staticLayers = [];
-for (const layer of canonicalLayers) {
+for (const layer of requestedLayers) {
   const analyzed = await analyzeJavaScriptApplicationWithOwnedScope({
     input_path: layer.path,
     format: "auto",