修正 Codex STATE 续接并对齐 ranxi v2.10.5 借用验证

[HTExplicit]

Codex HTTP continuation discarded client STATE whenever process-local provenance was absent or expired. This restores ranxi v2.10.5's behavior: preserve unknown state and strip only a live foreign-account state, while keeping the independent two-shot borrowing qualification unchanged.

• Pin ranxi d977e7a5e24e5536db6ce8b8478743e0c4b11f77; execute extracted original functions in differential tests for source payload, target wire/verdict, cookie lifetime and business STATE. Sol remains separately qualified.
• Record observation transport phases and allow one retry only when a transport trace proves connect/TLS failure before HTTP headers. Uncertain sends are not replayed and each physical attempt consumes the existing diagnostic budget.
• Port account-test SSE keepalive and cancellation, with lifecycle race coverage.
• Extend the existing administrator diagnostic with bounded native task replay for source/ordinary/borrowed comparisons. Saved-account restrictions, observation isolation, complete history, synthetic sessions and the eight-attempt budget remain enforced; no credentials or route cookies can be injected.

Validation: extracted-reference provenance check; differential protocol tests; known/unknown/expired STATE tests; pre-HTTP retry tests; native replay isolation and forwarding tests; keepalive completion/cancellation tests. Only the locally failed parser-wording fixture was rerun after adaptation. The new keepalive race check runs in normal PR CI.

Production model-quality acceptance is pending deployment and is not implied by these offline results. No database migration, BPS/WS activation or recurring update automation is included.