refactor!: enforce canonical evidence and provider boundaries

Deliver complete Evidence directly through MCP with required nullable analysis profiles and immutable per-server delivery settings. Bind selected environments at construction and require typed cleanup outcomes with retained retry ownership.

Remove test-only routing, duplicate session and snapshot metadata, producer-field repairs, and ambiguous provider arguments. Separate artifact byte identity from occurrence classification and retain typed source-map and partial native facts across CLI, MCP, and verifier consumers.

BREAKING CHANGE: obsolete Evidence envelopes, session aliases, incomplete snapshots, and missing normalized producer facts are no longer accepted.

src/application/javascript/JavaScriptRecoveryService.test.ts

@@ -1,10 +1,7 @@
 import { describe, expect, it } from "vitest";
 import { AnalysisCapabilityUnavailableError } from "../../domain/analysisErrorCore.js";
 import { err, ok } from "../../domain/result.js";
-import type {
-  JavaScriptRecoveryInput,
-  JavaScriptRecoveryResult,
-} from "../../domain/javascript/javascriptRecovery.js";
+import type { JavaScriptRecoveryResult } from "../../domain/javascript/javascriptRecovery.js";
 import { createAnalysisExecution } from "../AnalysisProvider.js";
 import { JavaScriptRecoveryService } from "./JavaScriptRecoveryService.js";
 
@@ -47,31 +44,6 @@ const providerIdentity = {
 const input = { path: artifact.path, output_directory: "/tmp/output" };
 
 describe("JavaScript recovery workflow", () => {
-  it("passes normalized requests to a typed port and returns derived Evidence", async () => {
-    const received: JavaScriptRecoveryInput[] = [];
-    const service = new JavaScriptRecoveryService({
-      recover: async (request) => {
-        received.push(request);
-        return ok(
-          createAnalysisExecution(recoveryResult(), providerIdentity, {
-            subject: { ...artifact, format: "javascript" },
-            limitations: ["Not executed"],
-          }),
-        );
-      },
-    });
-    const result = await service.recover(input);
-    if (!result.ok) throw result.error;
-    expect(received).toEqual([
-      { ...input, extraction_mode: "structural", rewrite_level: "standard" },
-    ]);
-    expect(result.value).toMatchObject({
-      operation: "recover_javascript_sources",
-      confidence: "derived",
-      authority: "shipped-artifact",
-      provider: providerIdentity,
-    });
-  });
   it("preserves a missing provider reason", async () => {
     const failure = new AnalysisCapabilityUnavailableError(
       "fixture-recovery",