Stamp a ledger operation with the caller the runner proved for the call in flight it names, refusing another module's call or one not in flight; serve the ledger calls on the pipe (issue 1966 T5)

node-tools/internal/runtime/runtime.go

@@ -744,6 +744,8 @@ type consumers struct {
 	provisioned provisionWatches
 	// ledgers is how a module's ledger is opened (ledgers.go).
 	ledgers ledgerSource
+	// calls are the tool calls in flight, by the id each bundle was handed (ledgers.go, novox/hq ADR 0597 §7).
+	calls callsInFlight
 }
 
 type moduleEvents struct {