#3996 refactor: reuse canonical device identity projections

Summary

Use existing kernel deviceIdentity and deviceShape helpers for provider app-log envelopes and Limrun runtime facts. Both consumers repeated the canonical ownership field projection. Preserve the missing-appleOs guard, optional-field omission and provider mode while keeping future identity changes with the kernel owner.

Five files change, including focused output-shape coverage at both consumers and the kernel helper. Production source shrinks by 18 lines and 660 bytes including imports. CI measured installed/unpacked size −405 B and download size −68 B at the current head. The follow-up adds tests only. No linked issue or production scope expansion.

Validation

• Head: 661bafd15d8f546de8072a9ee7f59527c8ea3e03; base: eedc0df3d2168275dcd89ed21613c3362d595731.
• AGENT_DEVICE_VITEST_MAX_WORKERS=1 pnpm check:affected --run --head 661bafd15d8f546de8072a9ee7f59527c8ea3e03: passed, exactCommit: true; receipt run-Sp50Vs, 7 passed / 7 skipped checks, 960 related tests passed.
• Initial validation at cadaddfc had five provider-scenario timeouts. Unchanged base passed the same command (948 tests), then cadaddfc passed (950 tests), without source/timeout changes. Initial timeout cause remains unproven.
• Independent Apex review at cadaddfc: no findings. Omission-coverage follow-up reviewed locally; 28 focused tests passed.
• GitHub owns full coverage, provider integration, size and platform smoke evidence. Parked replay lanes were skipped locally. No live device route changes.