v0.325.0: share + escrow limiters reserve first; family sessions as fingerprints; samba renames apply; path guard widened; gates in a worktree

R-1111 reserveAttempt is the one limiter body (share password, escrow re-auth, dashboard sign-in). R-1112
family.json holds fingerprints; old files are converted at load. R-1113 the household's pass reuses its
family session. R-1109 the samba compose carries the smb.conf hash. R-1110 TestNoBareDrivePathToPathHelpers.
R-1114 shared_scripts.py resolves the felhom.eu sibling from a worktree. Each red-proved.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/scripts/retrieval_promise_gate.py

@@ -57,8 +57,10 @@ GO_SOURCES = [
 # sibling clone is read the way controller_gates.py reads reuse_refs_check.py: CI clones felhom.eu
 # beside this repo, and an ABSENT clone is INCONCLUSIVE (exit 2) — never a pass on an empty list.
 # FELHOM_SHARED_SCRIPTS overrides the directory (the decoy suite uses it; nothing else should).
-_SHARED_SCRIPTS = os.environ.get("FELHOM_SHARED_SCRIPTS") or os.path.normpath(
-    os.path.join(_HERE, "..", "..", "..", "felhom.eu", "scripts"))
+# The lookup itself is shared_scripts.py's (R-1114): the env override first, then the main clone's sibling, so a
+# worktree outside git/ finds it too.
+from shared_scripts import shared_scripts_dir  # noqa: E402  (the script dir is on sys.path, above)
+_SHARED_SCRIPTS = shared_scripts_dir(os.path.normpath(os.path.join(_HERE, "..", "..")))
 if not os.path.isfile(os.path.join(_SHARED_SCRIPTS, "customer_copy_vocab.py")):
     print("retrieval-promise gate INCONCLUSIVE: the shared vocabulary is missing (%s) — the felhom.eu "
           "clone must sit beside this repo; without the stems nothing can be judged" %