ci/woodpecker/pr/ci Pipeline was successful
Review round 1 blocker: sameEvent omitted transferFrom/transferTo, so a retried transfer re-routed to a different destination would silently replay instead of conflicting. Transfer source/destination are semantic event content per §5.2. Adds a witness varying the transfer destination on a duplicate idempotency key; also fixes a stale cross-reference in the db witness header.