Preserve event provenance across callback precedence
When a transfer failure can be converted into a callback, selecting a callback template must not erase the originating transfer policy. Otherwise an updated queue-notification path can be correct in isolation while the real recovery flow still falls through to legacy recipient ga…