Preserve live activation state when reconciling paused defaults
When safe source defaults mark every alert paused but some installed rules are intentionally active, replacing live rules with the export can silently remove monitoring. Reconcile by stable identity against a fresh live snapshot: preserve existing pause states, stage genuinely ne…