fix: preserve Bombadil initial state across realms

[0thernet]

Summary

• transport the first exact Direct identity through an unnamed Bombadil extractor cell so Boa formula closures observe the browser-side latch
• preserve the existing named direct cell, stable identity checks, quiescence semantics, and 10-second bounds
• prepare the coherent v0.7.12 package, installation, publishing, and immutable v0.7.11 recovery surfaces

Validation

• focused src/tooling/bombadil-campaign.test.ts: 16 passed, 0 failed
• canonical bun run check: passed at the sealed two-file repair checkpoint under the exclusive scheduler
• two independent exact-diff reviews: clean
• git diff --check: clean
• bun.lock and dist/**: unchanged

This PR is intentionally draft pending exact-head CI and the separately authorized readiness/merge boundary.