fix: make Service Worker cache and removal outcomes truthful

SW-URL-01: canonicalize each generated root-relative manifest URL against the
registration scope once, re-check same-origin, and share that absolute identity
across install cache keys, fetch classification and cache lookup or delete.
Previously every verified asset fell through to the network.

SW-01: serve verified static requests only from the current release cache. A
CacheStorage-wide match could return a previous release's response for the same
URL while the delete targeted a cache that was never read. The worker scope
facade no longer exposes a wide match at all.

SW-02: cache reset deletes only names that parse as owned, so a foreign cache
sharing the ca-static-v1- prefix survives.

SW-03: unregister() resolving to false is a FAILED unregister, not UNREGISTERED.

SW-04: staged removal reports what happened - ABSENT, UNREGISTERED and PURGED
map to DISABLED, OWNERSHIP_MISMATCH to INCOMPATIBLE and FAILED to FAILED - so a
later release cannot delete the worker while a registration or owned cache is
still present.

SW-05: add the runtime-neutral service-worker-static-manifest codec that owns
exact row keys, the extension and content-type allowlist, the root-relative URL
rule and the length-prefixed canonical bytes. The generator and the build gate
hash those same bytes, and the build gate now decodes and recomputes the set
digest instead of type-casting the manifest.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/adapters/service-worker/service-worker-removal.ts

@@ -109,14 +109,24 @@ export async function removeOwnedRegistration(
   ) {
     return Object.freeze({ kind: "OWNERSHIP_MISMATCH" as const });
   }
+  let unregistered: boolean;
   try {
-    await registration.unregister();
+    unregistered = await registration.unregister();
   } catch {
     return Object.freeze({
       kind: "FAILED" as const,
       operation: "UNREGISTER" as const,
     });
   }
+  // SW-03. `unregister()` resolving is not success: `false` means the
+  // registration is still installed, so reporting UNREGISTERED would let a
+  // later release delete the worker source while it is still controlling.
+  if (!unregistered) {
+    return Object.freeze({
+      kind: "FAILED" as const,
+      operation: "UNREGISTER" as const,
+    });
+  }
   return Object.freeze({ kind: "UNREGISTERED" as const });
 }