fix(javascript): preserve builtin identity and share alias traversal

Track module writes and escapes at their owner, preserve capture and reassignment ordering, and share CommonJS/default namespace identity without erasing parent-slot changes. Carry write sites into ambient alias resolution and use parsed write targets across consumers. Deduplicate returned-reference work with cycle context; retain unchanged temporal selection identity so provenance memoization stays effective.

Reviewed fixes include #2041, #2465, #2830, #2881, and #2948. Remove superseded mutation representations and the ineffective per-markValue dedup layer.

Validation: 380 focused JavaScript tests passed under a 384 MiB heap cap, including the previously aborting 30-level/128-call alias regression. Six public CLI/MCP builtin tests passed. Exact pdf.js completed-workflow performance remains unmeasured.

src/application/javascript/JavaScriptSemanticGraphBuilder.test.ts

@@ -65,6 +65,20 @@ it("projects closure and direct interprocedural flow without execution", () => {
   );
 });
 
+it("projects a destructuring assignment member target as a property write", () => {
+  const graph = graphFor(`
+    const source = { count: 1 };
+    [source.count] = [2];
+  `);
+  const operations = graph.nodes.filter(
+    ({ properties }) => properties.operation_kind !== undefined,
+  );
+  expect(operations.map(({ label }) => label)).toEqual(["write:/count"]);
+  expect(graph.relations).not.toContainEqual(
+    expect.objectContaining({ relation: "reads-property" }),
+  );
+});
+
 it("keeps dynamic calls explicit and returns complete deterministic results", () => {
   const graph = graphFor(`
       const handlers = { ready() { return 1; } };

src/application/javascript/JavaScriptSemanticGraphResources.test.ts

@@ -351,6 +351,7 @@ const emptyAnalysis = (): JavaScriptArtifactAnalysis => ({
   packages: [],
   json_modules: [],
   html_scripts: [],
+  html_inline_scripts: [],
   source_maps: [],
   visited_ast_nodes: 0,
   findings: 0,