Preserve live activation state when reconciling paused defaults

When safe source defaults mark every alert paused but some installed rules are intentionally active, replacing live rules with the export can silently remove monitoring. Reconcile by stable identity against a fresh live snapshot: preserve existing pause states, stage genuinely new rules paused, block equivalent rules under another identity, and review changes to enabled queries, notification labels or routing. Keep planning separate from applying. This protects intentional activation without implying the new telemetry or delivery path is accepted.

Applies when: Source-controlled alert catalogs are synchronized after an incremental rollout. Keywords: alert reconciliation paused defaults activation identity duplicates routing snapshot