v0.325.0: share + escrow limiters reserve first; family sessions as fingerprints; samba renames apply; path guard widened; gates in a worktree

R-1111 reserveAttempt is the one limiter body (share password, escrow re-auth, dashboard sign-in). R-1112
family.json holds fingerprints; old files are converted at load. R-1113 the household's pass reuses its
family session. R-1109 the samba compose carries the smb.conf hash. R-1110 TestNoBareDrivePathToPathHelpers.
R-1114 shared_scripts.py resolves the felhom.eu sibling from a worktree. Each red-proved.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/stacks/samba_test.go

@@ -167,6 +167,53 @@ func TestSambaReconcile_IdempotentNoComposeCall(t *testing.T) {
 	}
 }
 
+// R-1109: the household renames a share at the same folder (remove + add, the UI's way). The rendered compose on
+// disk must change, so the compose up the reconcile runs RECREATES the container and the new name is served; a
+// second pass with nothing new performs no compose call.
+func TestSambaReconcile_SamePathRenameChangesCompose(t *testing.T) {
+	m, sett, root, upCalls := newSambaManager(t)
+	shareDir := seedShare(t, sett, root, "dokumentumok")
+	enableSMB(t, sett)
+	if err := sett.AddSMBShare(settings.SMBShare{Name: "dokumentumok", Path: shareDir}); err != nil {
+		t.Fatal(err)
+	}
+	if err := m.ReconcileSamba(); err != nil {
+		t.Fatal(err)
+	}
+	composePath := filepath.Join(m.sambaDir(), "docker-compose.yml")
+	c1, err := os.ReadFile(composePath)
+	if err != nil {
+		t.Fatal(err)
+	}
+	m.sambaRunFn = func() bool { return true }
+	if err := sett.RemoveSMBShare("dokumentumok"); err != nil {
+		t.Fatal(err)
+	}
+	if err := sett.AddSMBShare(settings.SMBShare{Name: "iratok", Path: shareDir}); err != nil {
+		t.Fatal(err)
+	}
+	before := *upCalls
+	if err := m.ReconcileSamba(); err != nil {
+		t.Fatal(err)
+	}
+	c2, err := os.ReadFile(composePath)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if string(c1) == string(c2) {
+		t.Fatalf("a same-path rename left docker-compose.yml unchanged — the running container is never recreated (R-1109)")
+	}
+	if *upCalls != before+1 {
+		t.Errorf("the rename must run exactly one compose up, got %d", *upCalls-before)
+	}
+	if err := m.ReconcileSamba(); err != nil {
+		t.Fatal(err)
+	}
+	if *upCalls != before+1 {
+		t.Errorf("a pass with nothing new must perform no compose call, got %d more", *upCalls-before-1)
+	}
+}
+
 // Edge case: a share on a DISCONNECTED storage path is never exported (config retained).
 func TestSambaReconcile_DeadMountOmitted(t *testing.T) {
 	m, sett, root, _ := newSambaManager(t)