fix(providers): preserve bounded artifact reads and cleanup owners

Refs #4373, #4455, #4457, #4458.

Use canonical artifact ownership in Go, Rust, SQLite and PE readers and their failure consumers. Admit PE read budgets before allocation and ignore zero-extent sections in interval ownership. Close Rust resources through CLI and MCP lifecycles.

tests/boundary/sqlite/sqliteDatabaseDescriptorCleanup.test.ts

@@ -308,6 +308,10 @@ it("retains reply-read cancellation and retries the failed reply descriptor clos
   descriptorCleanup.denied = false;
   await selected.provider.close();
   expect(handle.fd).toBe(-1);
+  expect(result.error.cleanupIncomplete).toBe(false);
+  expect(projectAnalysisError(result.error)).toMatchObject({
+    code: "cancelled",
+  });
   for (const root of selected.roots)
     await expect(access(root.path)).rejects.toMatchObject({ code: "ENOENT" });
 });