fix(javascript): preserve incoming callback target uncertainty (#4243)

Preserve incoming callback uncertainty and resolve proven preceding writes.
Share read-position and initializer identity facts with returned-reference
analysis; cache completed projected work with actual cycle dependencies.

Fixes #3880

src/domain/javascript/javascriptSemanticState.ts

@@ -24,7 +24,7 @@ import type {
 } from "./javascriptSemanticValueTypes.js";
 
 /** Internal initializer plus a destructuring/member projection. */
-interface JavaScriptSemanticInitializer {
+export interface JavaScriptSemanticInitializer {
   readonly node: t.Node;
   readonly projection: readonly (string | number | null)[];
   readonly entryBody?: t.BlockStatement;