fix(v0.6.10): normalize repository recovery identity

[qiansc]

Summary

• identify Git repositories by their full namespace/repository path instead of transport host or SSH user
• keep pinned commit and module subpath validation unchanged
• preserve local-path recovery behavior and reject genuinely different repositories

Validation

• bun run build
• bun run verify:full
• bun run release:prepare
• bun run release:notes