v0.1.0-alpha.9: Account ownership cleanup arguments

Updates LyraCore's party and Transfer cleanup calls for durable Account ownership. The matching LyraCore checkout selects the new SessionActor argument; older checkouts retain their existing calls. Transfer keeps its separate id argument. Operator cleanup uses null ownership and does not adopt a replacement World Session's token.

A refused party cleanup stops before changing the local mirror. Running fixture World Sessions must release or expire before this cleanup can proceed.

PR #11 passed independent review, all four offline shell checks and Ubuntu/macOS/coverage CI. The command-boundary regression covers all three changed callers, both argument layouts and a Character guid above 2^53. No Realm was accessed.