feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/application/javascript/JavaScriptSemanticGraphBuilder.ts

@@ -723,15 +723,17 @@ const projectFileResourceLimits = (
       family: "data-flow",
       relation_kinds: ["defines"],
       reason: "resource-limit",
-      detail: semanticResourceLimitReason(limit),
+      detail: semanticResourceLimitReason(limit, context.ir.coverage.precision),
       candidate_node_ids: [],
       evidence: {
         ...unknownSemanticEvidence(context.file, null),
         coverage: partialApplicationCoverage(
-          semanticResourceLimitCoverage([limit]),
+          semanticResourceLimitCoverage([limit], context.ir.coverage.precision),
           null,
         ),
-        limitations: [semanticResourceLimitReason(limit)],
+        limitations: [
+          semanticResourceLimitReason(limit, context.ir.coverage.precision),
+        ],
       },
     });
   }
@@ -859,15 +861,17 @@ function* createCallSiteNodes(
           family: "call-flow",
           relation_kinds: ["argument-to-parameter"],
           reason: "resource-limit",
-          detail: semanticResourceLimitReason(limit),
+          detail: semanticResourceLimitReason(limit, ir.coverage.precision),
           candidate_node_ids: [],
           evidence: {
             ...unknownSemanticEvidence(file, call.location),
             coverage: partialApplicationCoverage(
-              semanticResourceLimitCoverage([limit]),
+              semanticResourceLimitCoverage([limit], ir.coverage.precision),
               null,
             ),
-            limitations: [semanticResourceLimitReason(limit)],
+            limitations: [
+              semanticResourceLimitReason(limit, ir.coverage.precision),
+            ],
           },
         });
       }