fix(core): the last fixes' core half (W1 W2 W5 W19)

Stage 4 of docs/modules/rust/PLAN_LAST_FIXES.md, with the org lead's
2026-10-22 decisions.

W19: one module per site at boot, as at install. The first module
directory by name holds the site, whether or not it then loads; every
other is recorded startup_failed at the manifest stage, before a line of
its code is required, with a reason naming the module that holds the
site. Module-uo and Module-Rust side by side used to fail the second
with a slot collision. Loader, lifecycle, schema and event-contract
tests that loaded several fixture modules now load each case alone.

W1: a reconcile files a resource the game no longer has, and that is
past its `until`, as expired rather than orphaned, with the same log
line expired() writes. No MODULE_API bump: `until` and reconcile's
answer are unchanged.

W5: a dry run that passes on the draft is kept with the fingerprint of
the validated spec (three nullable columns on event_definitions).
Publish stamps the new version verified, with that dry run's reviewer
and time, when the spec it freezes has the same fingerprint, and writes
version.verified on the occurrences it re-pins. Verify answers
draftRecorded and publish answers verified; OpenAPI regenerated.

W2: the run console says "Phase p1: steps done, waiting to advance" and
"Why this phase has not advanced", not "has not started".

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

server/test/eventModuleContract.test.js

@@ -694,14 +694,24 @@ test('inForce() is optional, and a fourth question rather than a fourth spelling
     }])
   }`
 
+  //
+  // Each in a modules directory of its own, because a site runs one module (W19):
+  // side by side, `leaseb` and `leasec` would be refused for `leasea`'s sake.
+  const fresh = () => {
+    tmpRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'rg-events-module-'))
+  }
+
   const without = loadModule('leasea', lease('leasea', ''))
   assertRegistered(without)
   assert.equal(registries.eventLease('leasea.rate.gain').inForce, null)
 
+  fresh()
   const withIt = loadModule('leaseb', lease('leaseb', 'async inForce() { return { ok: true, held: true } },'))
   assertRegistered(withIt)
   assert.equal(typeof registries.eventLease('leaseb.rate.gain').inForce, 'function')
 
+  fresh()
+
   // And a declaration that is present but not callable fails the module rather
   // than being ignored -- the same posture the other three take. A module that
   // meant to answer and cannot is a module whose leases would silently never be