feat(persona): who holds an old value, where an edit landed, what a context may call a face

[stormer78]

Adds UI for the persona lifecycle fields published in @openvtc/trust-tasks 0.19.13 (trustoverip/dtgwg-trust-tasks-tf#533). The agent side is OpenVTC/verifiable-trust-infrastructure#1597. Against an agent without that change, the new fields are simply absent and every screen falls back to saying nothing new.

Released

• Per claim: each disclosed claim now shows whether the verifier's copy is still current.
• Out-of-date parties: above the table, a list of everyone holding a value the holder has since changed.
  • Grouped by verifier, context and persona.
  • Only the latest disclosure to each counts, so someone already sent the new value isn't listed.
• removed is kept separate from changed. There's nothing newer to send, and the verifier keeps what it received.
• unknown is never shown as current. It comes from an older agent or a record made before fingerprints existed.
• Model: manager/disclosure-currency.ts. The pane only draws.
• Not included — a one-tap "send them the new value" button. A disclosure is a context-side preview → present step, which the console doesn't perform. The copy says to present the new value again from that context.

Attribute save

• Says where the edit landed, from refreshed / heldByPin: how many places and contexts now show the new value, and how many faces pin the earlier one.
• The note is accent unless it also carries a correlation warning.

Wearing a face

• New field for what the context may call the face. The copy says the context never sees the holder's own name for it.
• The form loads the existing label. binding/set replaces the whole binding, so a face change would otherwise wipe the label. A rendered test pins this; I checked it fails with the load removed.
• personaBindingSet gains label.

Dependency

@openvtc/trust-tasks is raised to ^0.19.13 at the root and in core, so only one copy is installed. The lockfile changes that one package and nothing else. A local npm re-resolve had dropped the libc fields on native optional dependencies, which Linux installs use to pick the right native package, so I edited it by hand and checked it with npm ci.

Checks

• npm run lint
• npm test: 1536 passed, 0 failed. New:
  • manager-disclosure-currency.test.mts (5 tests)
  • a core label payload test
  • a rendered label-preservation test
• npm run build