Refuse a held-back membership's old wrapper in the tool runner, pinning mesh-sdk's review-round-1 codec

The old grants part wrote its wrapper for a held-back membership too; the new part leaves such a key alone, and taking
it would serve what the hold kept back with the stream's copy ignored. The integration test now proves that copy is
served instead. Review round 1 of issue 774's fix.

node-tools/internal/meshtest/meshtest.go

@@ -119,11 +119,12 @@ func (m *Mesh) IssueInGrants(t *testing.T, mem bus.Membership) {
 }
 
 // IssueInGrantsWrapped writes a membership as the grants part wrote it before mesh-sdk's codec (until 2026-10-30, what
-// the live mesh holds until the part writes again): its pass record, the membership inside.
-func (m *Mesh) IssueInGrantsWrapped(t *testing.T, mem bus.Membership) {
+// the live mesh holds until the part writes again): its pass record, the membership inside, published saying what
+// became of it ("published", "unchanged", or why it was held back).
+func (m *Mesh) IssueInGrantsWrapped(t *testing.T, mem bus.Membership, published string) {
 	t.Helper()
 	body, _ := json.Marshal(map[string]any{"node": mem.Node, "module": mem.Module, "digest": "sha256:0",
-		"membership": sdkMembership(t, mem), "published": "published"})
+		"membership": sdkMembership(t, mem), "published": published})
 	m.putGrants(t, mem, body)
 }