935c1e8962
Replace the requires_wal-gated unit assertion (which never runs on WAL-reset- vulnerable runtimes such as macOS 3.46) with an end-to-end test through repair_state_db_schema that traces every _connect_repair_durable call against the guard's enter/exit and fails on main's shape (a connect after guard-exit). Runs on every platform. Docstring now names the actual hazard.