Bind first local delivery recovery to the exact program and subflow cursor #2207

Apply first-delivery ownership and the write-ahead pause to explicitly durable local program runs. Bind the pause to the exact graph frame stack, loop row, input bindings, action state, prior sequence and verified history. Advance only when a matching verified successor checkpoint proves that exact delivery and authority progress. If the result is unresolved, use a supported read-only record check or keep the named hold. A retry approval can't send the same attempt again. Keep the existing managed, resumed and folded-form behavior.

Acceptance: use deterministic synthetic interruptions before input, after an effect but before the authority commits it, and after the matching verified checkpoint. Cover a nested subflow, a repeated action on a different loop row, a conflicting cursor and a live competing continuation. Assert no dispatch without the pause, no duplicate effect on recovery, and no positive result without independent verification.

Refs #2200, #1480