#21436 Preserve app callers through the shared action registry

Shared action handlers lost which app made a call, even when its origin was a user gesture. Carry the calling app through the provider, router and registry, and include it in replay matching. Wire params cannot choose this attribution, and it grants no execution permission.

Validation: both suites pass on the reviewed fleet: eight methods plus parameter cases covering app attribution, cross-app replay conflicts, forged claims and direct native calls. The regression fails before the fix. The conventions check still reports the existing tabSwitchMark free function.

Stacked on #21429.

Changelog

Fixed: Shared actions retain the calling app's attribution.