fix(javascript): retain selected application paths in Evidence

Record the admitted selected path separately from canonical artifact identity in successful and partial Evidence. Anchor relative inputs consistently across both CLI routes using the existing caller-path owner.

Adapt shared client verifier assertions and boundary coverage from PR #5261, and the dedicated-route anchoring correction proposed in PR #5265. Historical parsing remains independent of live paths, including legacy records without the parameter.

Validation: 118 focused tests in eight files, static and docs checks, discovery, and installed Gemini CLI 0.29.5 loopback verification of 207 schemas/241 examples passed. Synthetic static-analysis fixtures; no live Google API or native target execution.

Fixes #5258

Co-authored-by: kwakhyun <khyun2348@naver.com>
Co-authored-by: vishal-tambi <tambivishal3@gmail.com>

scripts/verify-commandcode-client.mjs

@@ -10,6 +10,7 @@ import {
   toolContract,
 } from "../dist/contracts/toolContracts.js";
 import { exec } from "./lib/verify-package-core.mjs";
+import { assertJavaScriptApplicationInputPaths } from "./lib/javascript-application-paths.mjs";
 import { createVerifierRun, completeVerifierRun } from "./lib/verifier-run.mjs";
 import { createOpenAiModelFixture } from "./verify/clients/model-fixture.mjs";
 
@@ -228,7 +229,7 @@ const fixture = await createOpenAiModelFixture({
     const evidence = toolContract(
       "analyze_javascript_application",
     ).outputSchema.parse(JSON.parse(last));
-    assert.equal(evidence.subject.local_path, target);
+    await assertJavaScriptApplicationInputPaths(evidence, target);
     const shapes = evidence.normalized_result.graph.nodes
       .flatMap((node) => node.observations)
       .map((observation) => observation.properties)