test(cli): the restore guard resolves module aliases by binding and ends an alias at its reassignment #587

The static mock-restore guard (packages/cli/test/helpers/mock-restore-guard-scan.ts) tracks module-object aliases by identifier name, and keeps guarded-global and module-object aliases after their binding is reassigned to a local value. Both make it over-report: a member assignment onto a local object (a parameter that shadows an imported namespace, or an alias rebound to a local value) is required to go through patchShared. Neither makes it miss a patch of shared state.

The fix: resolve module-object aliases by binding (the TypeScript checker's symbol, as the guarded-global analysis does) instead of by name, and end an alias at the assignment that rebinds it. Tests: a parameter named like an imported namespace is not reported; an alias rebound to a local object is not reported after the rebinding but is reported before it; every existing red fixture stays red.

Follow-up from review of #583.