Function attested_sidecar_candidates

atomic-cli/src/commands/intent/bridge.rs:159–172

Candidate legacy-sidecar paths, most-preferred first: the normalized-id path (what the current `attest` writes) and the raw-arg path an M1a-era build wrote (it sanitized the RAW CLI arg, un-normalized). Probing both lets the dual-read fallback find pre-upgrade sidecars regardless of the id form the original `attest` was invoked with. De-dups when the two coincide.

(repo: &Repository, id: &str)

/// dual-read fallback find pre-upgrade sidecars regardless of the id form the
/// original `attest` was invoked with. De-dups when the two coincide.
fn attested_sidecar_candidates(repo: &Repository, id: &str) -> CliResult<Vec<PathBuf>> {
    let normalized = attested_sidecar_path(repo, id)?;
    let raw = repo
        .dot_dir()
        .join("canonical")
        .join("intents")
        .join(sanitize_id(id))
        .join("attested.jsonld");
    let mut candidates = vec![normalized];
    if !candidates.contains(&raw) {
        candidates.push(raw);
    }
    Ok(candidates)
}

/// A hash of the source lift inputs, recorded in the sidecar so a later edit to
/// the intent can be detected as making the attestation stale. This is a