Filter stale non-AoA errors from deferred coverage

[8Dionysus]

PLAN

Fix deferred storage coverage so a disappeared non-AoA candidate does not carry stale runtime errors into the current owner snapshot, while preserving the candidate/provenance record and all current/AoA/global errors.

DIFF

• Filter only discovery_absent non-AoA candidate IDs from coverage and derived full-error aggregation.
• Keep the AoA owner record in coverage so the active-writer owner gate remains visible.
• Add one parametrized public-smoke test covering absent-only and current-error-preserved cases.
• Regenerate the contract ABI projection.
• Regenerate the pinned portable KAG family against the committed source snapshot: 312 generated files, 24,650,928 changed generated bytes, family digest f12b36f581b3484bcadfd0ba01ba8e43fbc9ea33654fb7d895f952076c97d7a7, with its digest-bound owner budget receipt.
• No installed host, service, runtime, or private evidence state is changed.

VERIFY

• Focused storage repair smoke: 38 passed.
• Source-fast validation with public smoke: 1959 passed in 115.73s.
• Full owner evidence graph: passed with sufficient=true.
• Instant graph: passed.
• Pinned KAG generator --check against the committed source snapshot, ABI signature --check, scaffold --check, public-boundary validation, and git diff --check: passed.
• AoA-KAG provider-home validation: passed for the generated family digest.
• The first PR run exposed the expected pre-commit KAG snapshot mismatch; the projection-only follow-up regenerated the committed snapshot and is now the CI candidate.

LIVE HOST EVIDENCE

No live host state, install projection, service, or runtime was changed or used as publication evidence.

REPORT

The current deferred owner snapshot retains all candidates and authoritative current/AoA/global errors while dropping only stale errors attached to disappeared non-AoA candidates. The KAG family now describes the committed source tree.

RESIDUAL RISK

The change relies on the existing source-owned candidate identity and AoA-owner-record predicates. The generated KAG delta exceeds the default one-megabyte incremental budget because committed source anchors move with the updated cli.py and test; the exact digest-bound owner receipt records that exception. Downstream consumer acceptance remains the responsibility of the protected Repo Validation check.