fix(daemon): authorize live remote root sessions durably
Follow-up to #26093: authorize reopening a live registry root session only on its own daemon while honoring durable transfer authority.
The daemon now derives transfer authority from durable acpmux events using a per-session latest-state cache. It reconstructs once while the session log loads, including closed sessions after restart, updates only after durable event append, and sequence-guards replay against newer abort/commit events. _acpmux/info exposes transferBlocked without disk I/O; unknown state is null until restoration completes. The caller can request waitLogs:true from a worker, never from the control request path. Authorization checks transfer revocation before landed markers, so stale landed records cannot reopen a moved-away root.
Regression coverage includes begin/commit revocation across daemon restart, explicit abort restoration, watchdog abort restoration, imported-session reset, stale replay ordering, failed append behavior, and cache reuse without a per-open scan.
Validation at head 8e672d34f9d804cf9f4a874ffe82aa2761565a90:
prepush-gate.py: pass.- Hosted cache unit filter: run 40514142063, pass.
- Hosted restart and explicit/watchdog integration filters: run 40514926897, pass.
This PR supersedes the daemon portion removed from #26093; #26093 remains the UI right-pane change.
Agent session: agent session