#3762 fix: align replay, SDK, and session boundaries with ADRs

Summary

• ADR 0012: rank suggestions by identity strength, recorded region only for verified target-v1 evidence, then document order. The divergence caller owns region membership; ranking stays synchronous with a one-module eager closure. Keep region primitives private behind the shared selector predicate.
• ADR 0010: SDK lease allocation/heartbeat reject malformed required fields with COMMAND_FAILED, INVALID_LEASE_RESPONSE, and the preserved daemon response. Document the error contract.
• ADR 0033: remove two barrels and import command owners directly; retain the internal-owner relocation as a follow-up.
• ADR 0022: distinguish semantic shape queries from named store operations and retain actionable invariant/gate pointers.

Part of #3744. 31 files; scope includes regression tests, diagnostics, and matching documentation. ADR 0012’s two factual corrections satisfy the maintainer’s before-merge requirement. No device behavior changes.

Validation

• Tested head: 8a49ba0a0857a25fb735226fba81698f40885f9c (follow-up base e4c4813491).
• Focused replay/backend suites: 16 passed; selector/replay suite: 60 passed; closure-budget suite: 940 passed; related suite: 3,054 passed.
• Isolated region-tier mutation at 296e27e205: same suggestion suite changes from 5 passed to 2 failed/3 passed; temporary worktree removed.
• Setup/build, full-repository format, Fallow, and all 36 runnable affected checks passed. Receipt .tmp/validation/run-dDItTG/receipt.json: exactCommit=true, checkoutChanged=false.
• All seven review threads resolved. No rejected findings. New-head CI, including Coverage, integration, and native checks, remains required before merge.