v0.283.1: a Stop holds during the volume dump in production and at the crash recovery (R-721, found live on v0.283.0)

Red-proofs RP43, RP44. MinAgent 0.131.0 (unchanged).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/cmd/controller/main.go

@@ -2297,6 +2297,14 @@ type gatedAppStopStarter struct {
 	logger *log.Logger
 }
 
+// WantsStopped (R-721, v0.283.1) forwards the household's intent to the crash recovery (see Recover).
+func (s gatedAppStopStarter) WantsStopped(name string) bool {
+	if w, ok := s.inner.(interface{ WantsStopped(string) bool }); ok {
+		return w.WantsStopped(name)
+	}
+	return false
+}
+
 func (s gatedAppStopStarter) StartStack(name string) error {
 	if ok, why := s.gate.MayStart(name); !ok {
 		s.logger.Printf("[WARN] [appstop] refusing to restart %q after an interrupted operation: %s", name, why)
@@ -2735,6 +2743,12 @@ func (a *stackAdapter) IsDeploying(name string) bool {
 	return ok && s.Deploying
 }
 
+// WantsStopped (R-721, v0.283.1): the backup package asks this before restarting an app it stopped for a
+// volume dump. Measured live on 9202 2026-09-30 with v0.283.0: the method existed on the stacks manager but
+// NOT on this adapter, so the dump's type assertion failed and a household Stop was undone 8 s later.
+// Pinned by TestR721_TheBackupsStackProviderAnswersWantsStopped.
+func (a *stackAdapter) WantsStopped(name string) bool { return a.mgr.WantsStopped(name) }
+
 func (a *stackAdapter) StartStack(name string) error {
 	return a.mgr.StartStack(name)
 }