fix(javascript): retain unresolved network targets with provenance

Resolve stable lexical and URL targets using shared effects, and preserve unresolved request expressions as partial facts. Carry their uncertainty through workers, artifact graphs, and the CLI. Scope partial endpoint identity to the source site.

Refs: #3451, #3534

Co-authored-by: Hemang Varshney <218273197+hemv-857@users.noreply.github.com>

src/javascript/analysis/JavaScriptAnalysisWorkerSchemas.test.ts

@@ -103,3 +103,16 @@ it("accepts candidate endpoint interpretations from static analysis", () => {
     ).success,
   ).toBe(true);
 });
+
+it("preserves partial request targets through the strict worker schema", () => {
+  const facts = analyzeJavaScriptStaticSource("fetch(endpointUrl);");
+  expect(facts.endpoints).toContainEqual(
+    expect.objectContaining({
+      kind: "network",
+      value: "endpointUrl",
+      resolution: "partial",
+    }),
+  );
+  const serialized = JSON.parse(JSON.stringify(facts)) as unknown;
+  expect(javaScriptWorkerStaticAnalysisSchema.parse(serialized)).toEqual(facts);
+});

src/javascript/analysis/JavaScriptAnalysisWorkerSchemas.ts

@@ -329,6 +329,7 @@ export const javaScriptWorkerStaticAnalysisSchema = z
         value: z.string(),
         mechanism: z.string(),
         interpretation: z.literal("candidate").exactOptional(),
+        resolution: z.literal("partial").exactOptional(),
       }),
     ),
     storage: z.array(