58d84d3e03
A legacy remote primary carries no registry connectionId, so the scoped reconnect reset could not name the restarted owner and fell back to preserving every owner-routed Bot tile -- leaving the restarted backend's own Bot Chat bound to its dead runtime (the original bug, persisting for that one connection shape). Unknown identity now fails toward recovery instead: preserve only Bot runtimes owned by provably-live secondary connections (liveSecondaryConnectionIds()); everything else drops its binding and re-resumes. A reset only costs a re-resume, so this is safe for the preserved-set survivors and correct for the dead one.