Keep serving the consumers postgres's grant file gives on its moved path (issue 937)

Only a moved consumer's plan names postgres, so on the moved path every
consumer still given by the controller's grant file was counted unasked
and offered for retirement (ace 5 of 5, novox 7 of 9), and could have
been retired unasked where the bound allowed. The moved path now reads
MESH_RECEIVES again: its logins are asked, the ones no plan names are
made and checked by the harness's grant pass until R1 (issue 682), and
an unreadable grant file retires nothing (issue 241). The harness's
grant pass becomes apply, identically in keycloak's copy.

modules/postgres/cmd/postgres-provider/main.go

@@ -35,10 +35,11 @@ func main() {
 	var h *Harness
 	if consumers := handedConsumersFile(os.Getenv, os.Stat); consumers != "" {
 		// Handed to the provisioner (novox/hq ADR 0373): the provider helper answers the consumers its
-		// machine's client fills the file with; the grant directory is not read. Retirement is the
-		// harness's, never run, so its guards and its tools stand (issue 780).
+		// machine's client fills the file with, and the grant file still gives the consumers not moved
+		// (issue 937). Retirement is the harness's, never run, so its guards and its tools stand (issue 780).
 		h = &Harness{
 			Resource: ProvisionName,
+			Receives: os.Getenv("MESH_RECEIVES"),
 			Adapter:  provisioner{pg: pg, announce: announce},
 			Log:      func(format string, args ...any) { fmt.Fprintf(os.Stderr, format+"\n", args...) },
 			Announce: func(event string, body map[string]any) {