feat(graph): owner_id 寫入鏈必經(根治無主資料)——配合 base owner-mandatory(D28)

- kbdb-client requireOwner 守衛:漏 owner 插件端即 throw,不再靜默送 owner:''
- owner 一路 thread:persistNodes/ingestEnvelope/entity-crud/triplet-crud 全必填
- 病灶修:POST /triplets/ingest 原本沒傳 owner→加 owner_id query+400
- 寫入 route 缺 owner→400;vitest 23→27
- 註:gloss-bridge 分支的 backfill/gloss-entry 另需套 owner 必填(附說明),不跨支疊改

src/actions/entity-pending.ts

@@ -16,7 +16,7 @@ export async function createPendingAlias(
   candidateEntityId: string,
   candidateCanonical: string,
   similarity: number,
-  owner?: string,
+  owner: string,  // 必經：pending record 也不可無主
 ): Promise<PendingAlias> {
   await ensurePluginTemplates(client);
   const id = await client.createRecord(
@@ -27,7 +27,7 @@ export async function createPendingAlias(
       candidate_canonical: candidateCanonical,
       similarity: String(similarity),
     },
-    owner,
+    owner,  // 必經：createRecord 內 requireOwner 守衛
   );
   return {
     id,
@@ -56,14 +56,14 @@ export async function getPendingAliases(client: KbdbClient, limit = 100, owner?:
 }
 
 /** 確認 → addAlias 到候選 entity。pending soft 保留（[→arcrun] base 缺 DELETE record）。 */
-export async function confirmPendingAlias(client: KbdbClient, pendingId: string, owner?: string): Promise<void> {
+export async function confirmPendingAlias(client: KbdbClient, pendingId: string, owner: string): Promise<void> {
   const rec = await client.getRecord(pendingId);
   if (!rec || !rec.values.raw_name) throw new Error(`Pending alias ${pendingId} not found`);
   await addAlias(client, rec.values.candidate_entity_id, rec.values.raw_name, owner);
 }
 
 /** 拒絕 → 以 raw_name 建新 entity。pending soft 保留（[→arcrun] base 缺 DELETE record）。 */
-export async function rejectPendingAlias(client: KbdbClient, pendingId: string, owner?: string): Promise<Entity> {
+export async function rejectPendingAlias(client: KbdbClient, pendingId: string, owner: string): Promise<Entity> {
   const rec = await client.getRecord(pendingId);
   if (!rec || !rec.values.raw_name) throw new Error(`Pending alias ${pendingId} not found`);
   return createEntity(client, rec.values.raw_name, owner);