fix(javascript): preserve and resolve complete source-map URLs (#1788)

Keep line-comment URL declarations intact and percent-decode local URL paths
once, preserving raw Evidence identity and artifact-root confinement.

Fixes #1781. Fixes #1782.

Assisted-by: Suika (gensokyo-skills:suika-scatter-gather-planning)

src/application/javascript/JavaScriptArtifactPathResolution.ts

@@ -162,6 +162,14 @@ const contextualCandidate = (
     return unresolvedCandidate("external", [
       "URL schemes and protocol-relative URLs are outside this local artifact path context.",
     ]);
+  if (context === "url-reference") {
+    const decoded = percentDecodeUrlPath(declared);
+    if (decoded === null)
+      return unresolvedCandidate("rejected", [
+        "The URL reference path percent-decodes to NUL or to bytes that are not UTF-8.",
+      ]);
+    declared = decoded;
+  }
   return relativeCandidate(input.sourcePath, declared);
 };