v0.325.0: share + escrow limiters reserve first; family sessions as fingerprints; samba renames apply; path guard widened; gates in a worktree

R-1111 reserveAttempt is the one limiter body (share password, escrow re-auth, dashboard sign-in). R-1112
family.json holds fingerprints; old files are converted at load. R-1113 the household's pass reuses its
family session. R-1109 the samba compose carries the smb.conf hash. R-1110 TestNoBareDrivePathToPathHelpers.
R-1114 shared_scripts.py resolves the felhom.eu sibling from a worktree. Each red-proved.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/infra/samba_test.go

@@ -108,3 +108,31 @@ func TestRenderSambaCompose(t *testing.T) {
 		t.Error("writable share must NOT be :ro")
 	}
 }
+
+// R-1109: a share renamed at the SAME path changes smb.conf only. The compose must change with it (the config-hash
+// label), or `compose up -d` keeps the running container on the old bind-mounted inode and the new name is never
+// served. And an unchanged config must render a byte-identical compose (no recreate on every pass).
+func TestRenderSambaCompose_ConfigHashLabel(t *testing.T) {
+	path := "/mnt/felhom-drives/hdd_1/userdata/shares/iratok"
+	before := SambaData{ServerName: "FELHOM", UID: 1000, Shares: []SambaShareRender{{Name: "dokumentumok", Path: path}}}
+	after := SambaData{ServerName: "FELHOM", UID: 1000, Shares: []SambaShareRender{{Name: "iratok", Path: path}}}
+
+	if RenderSambaConfig(before) == RenderSambaConfig(after) {
+		t.Fatal("setup: the rename must change smb.conf")
+	}
+	cb, ca := RenderSambaCompose(before), RenderSambaCompose(after)
+	if cb == ca {
+		t.Fatalf("a same-path rename left the compose byte-identical — compose up -d will not recreate (R-1109):\n%s", ca)
+	}
+	if want := "- felhom.smb-conf-sha256=" + SambaConfigHash(after); !strings.Contains(ca, want) {
+		t.Errorf("compose missing the label %q\n%s", want, ca)
+	}
+	if RenderSambaCompose(after) != ca {
+		t.Error("the same data must render the same compose (a recreate on every pass otherwise)")
+	}
+	// The premise of the bug, pinned: the binds are the same on both sides, so before the label nothing else differed.
+	bind := "      - " + path + ":" + path + "\n"
+	if !strings.Contains(cb, bind) || !strings.Contains(ca, bind) {
+		t.Errorf("both composes must bind %q", bind)
+	}
+}