feat(input): bind file receipts to the remote controller seat

Core-only releases#300: same-stream owner references, written-byte exclusion,
receipt dedup and bounded named non-grants. No adapter integration changes.

Co-authored by: todlando