Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

Every directory and archive resource carries `unknown`: move-out for a home folder whose program writes nothing there (the node-engine, delivered in mesh-host #117, moves the rest to ~/.local/state/mesh-moved/<module>/ with a list), module for ~/.ssh and ~/.claude, program elsewhere; `knows` keeps what a program or the operator relies on (powerlevel10k's compiled files, i3's scripts and the asus/g14 drop-ins, dunst's slack rule, betterbird's records, node-env's forge credential, issue 1033). Two shared folders are no longer declared. Each module's README says it. checks/owned holds every manifest to it; checks/sshdir stays while main's merge check runs it (issue 1035). Tests that pin a manifest follow the new key only. Reviewed in three rounds.

modules/memory-pressure/README.md

@@ -118,3 +118,12 @@ zram statistics and PSI lines. They cover:
 - `since` refused when it is an option;
 - *no match* read as no kills;
 - the manifest: tools listed equal tools served, events, no machine named, triggers exist.
+
+## Files it does not know
+
+Each directory or archive this module declares says how it treats a file it did not write (ADR 0422, ADR 0416).
+
+- `/etc/sysctl.d`: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
+- `/etc/systemd/oomd.conf.d`: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
+- `/etc/systemd/system/-.slice.d`: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
+- `/etc/systemd/system/user@.service.d`: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).

modules/memory-pressure/module.json

@@ -34,7 +34,8 @@
       "id": "sysctl-drop-ins",
       "type": "directory",
       "path": "/etc/sysctl.d",
-      "mode": "0755"
+      "mode": "0755",
+      "unknown": "program"
     },
     {
       "id": "swap-tunables",
@@ -55,7 +56,8 @@
       "id": "oomd-drop-ins",
       "type": "directory",
       "path": "/etc/systemd/oomd.conf.d",
-      "mode": "0755"
+      "mode": "0755",
+      "unknown": "program"
     },
     {
       "id": "oomd-limits",
@@ -68,7 +70,8 @@
       "id": "root-slice-drop-ins",
       "type": "directory",
       "path": "/etc/systemd/system/-.slice.d",
-      "mode": "0755"
+      "mode": "0755",
+      "unknown": "program"
     },
     {
       "id": "root-slice",
@@ -81,7 +84,8 @@
       "id": "user-manager-drop-ins",
       "type": "directory",
       "path": "/etc/systemd/system/user@.service.d",
-      "mode": "0755"
+      "mode": "0755",
+      "unknown": "program"
     },
     {
       "id": "user-manager",