feat: borrow slices of existing Move records and strings

[sanohiro]

Borrowed slices of existing AoS Move records and owned strings now support ordinary view formation, leaf projection, and explicitly shared indexed calls. For example, a slice of records containing owned strings can read view[i].inner.text as str without loading or copying an intermediate Move record. Whole Move-element reads and unrelated owning collection domains remain rejected.

The implementation preserves backing-storage lifetime and separately reserves the slice header through eager call operands. Nested indexed projections carry complete field paths through MIR, provenance validation, LLVM physical layout and cache text. Malformed inline paths reject before emission, including scalar-result paths outside ownership-graph demand. An existing fixed-array resource borrow classifier mismatch is also corrected against its original cleanup regression.

Validation: six parameterized whole/per-unit Move-slice owners cover formation, nested layouts, shared helpers, source/header invalidation, eager control, allocation/Drop negative controls and cache edits; HIR/MIR mutation owners cover all public entrypoints. Existing borrowed parameters, temporary owners, struct indexing, m5 and fixed-record template resource tests pass. Independent full-diff review findings are closed by the recorded correction; final preflight runs the owner, bounded gate and Clippy.

This implements R67 under plan 44. align-llm adoption and product acceptance remain consumer-owned.