fix(ios): distinct lineage for in-place system-surface captures (verify/settle)

Follow-up to #2438 / #2448.

**Purpose.** A capture served from a system surface (SafariViewService sheet) must not be comparable to an app-baseline capture, or `--verify`/`--settle` could diff a sheet against the app and misreport.

**Required behavior.** Carry the runner's `systemSurface` provenance into the iOS snapshot `comparisonIdentity`/lineage so a system-surface capture and an app capture are never treated as the same presentation. Post-tap corroboration (`hasMatchingPresentation`) and `--settle` diffs must refuse to compare across the app↔sheet boundary.

**Observable completion.** A `--settle`/`--verify` around an interaction that crosses into or out of the sheet does not produce a spurious diff; a unit test pins the identity mismatch.

**Dependencies.** #2448 already threads `systemSurface` through `readAppleSnapshotResult`; this wires it into lineage. See Fable rule 5 in the #2448 ADR amendment.

Parti da readAppleSnapshotResult e verifica come il valore systemSurface di #2448 raggiunga la comparisonIdentity e la lineage del confronto degli snapshot iOS. Esamina la regola 5 nell’emendamento all’ADR #2448, quindi aggiungi il test unitario descritto nell’issue per fissare il mismatch dell’identità. Conferma che --verify e --settle non confrontino catture oltre il confine app-to-sheet.

Scritto dal modello di indicizzazione a partire dal testo della issue.