fix(storage): count V2 catalog manifest CAS as logical refs

[DecisionNerd]

Summary

• Attribute each compact V2 graph-manifest CAS object as both a catalog logical reference and a physical identity.
• Fail closed in qualification when any category reports physical_objects > logical_references.
• Add regression coverage for multi-object catalog manifests (OVHC-AGENCY S18 assembly failure mode).

Closes #1089

Test plan

• CARGO_TARGET_DIR=... cargo test -p graphforge-storage --lib compact_v2_catalog_manifest
• CARGO_TARGET_DIR=... cargo test -p graphforge-storage --lib qualification_rejects_category_physical
• Exact-head CI / CI Gate
• Re-run host S18 after merge with feat(bench): execute S20–S26 under local-linux-cgroups-v2 on OVHC-AGENCY #1087 VmHWM path

Made with Cursor

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: b1c5af9a-a067-4f24-a244-64372fb28123

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Warning

Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[DecisionNerd]

CI Gate on this PR is blocked by an independent demand-capture race (deferred one-hop expand drop leaking into the next optimized two-hop DemandSnapshot), not by the catalog/manifest attribution change.

Sibling fix: #1092 (closes #1091). After that merges to main, rebase/re-run this PR for exact-head CI Gate.