Pin the group's mesh-sdk ef1ec1c9 and capture its conformance files there, so the sweep builds on kvlimit and the named readers (issue 774)

The sweep's controller changes use mesh-sdk's go/kvlimit and the ReadsAnnouncedBy that grants named
readers. At ef1ec1c9 mesh-config is a named reader of the controller's lease (its take-over reads it,
ADR 0561 §3), so the read test now expects it granted and a module not named refused. The captured SDK
(testdata/beside, conformance/events) is taken again at the pinned commit, as CAPTURED says; its file
is unchanged.

internal/inventory/judge_reads_test.go

@@ -9,7 +9,7 @@ import (
 )
 
 // Sweep 2026-10-30 (issue 774): a read is judged for its reader. The controller's lease, which its announcement marks
-// readable by nobody, is granted to the parts named for it (ADR 0561 §3) and refused to every other; a state its owner
+// readable by nobody, is granted to the parts named for it (ADR 0561 §3) and refused to every other (mesh-config named since mesh-sdk ef1ec1c9); a state its owner
 // announced readable is granted; one it keeps and did not is refused; an owner that announced nothing is read as before.
 // Each refusal is said, and a refusal already said is not said again.
 func TestAReadIsJudgedForItsReader(t *testing.T) {
@@ -23,7 +23,8 @@ func TestAReadIsJudgedForItsReader(t *testing.T) {
 	}{
 		"the lease, by the vault":            {"mesh-vault", "mesh-controller.lease", true},
 		"the lease, by the grants part":      {"mesh-grants", "mesh-controller.lease", true},
-		"the lease, by a module not named":   {"mesh-config", "mesh-controller.lease", false},
+		"the lease, by mesh-config":          {"mesh-config", "mesh-controller.lease", true},
+		"the lease, by a module not named":   {"restic", "mesh-controller.lease", false},
 		"a readable state":                   {"reader", "owner.open", true},
 		"a state kept and not readable":      {"reader", "owner.closed", false},
 		"an owner that announced nothing":    {"reader", "quiet.any", true},