Separate acceptance provenance from cleanup authority on restart
Live acceptance tests that create external side effects need a durable operation ID and cleanup journal before the first ambiguous response. On restart, reconcile the same operation and persist exact resource identities from incomplete responses. If the deploy…