[coneilen]

Summary

Fix the focused action-supplement runner so child process registrations use an action-only in-memory journal instead of the capture worker's uninitialized numbered journal.

Changes

• Add an explicit action-supplement mode to retain guarded process registrations in memory.
• Skip numbered capture-journal publication only for that mode.
• Preserve the in-memory registrations in the sanitized action manifest.

Test plan

RED: pwsh -NoProfile -File Tools\windows\Invoke-MatchedActionSupplement.ps1 against C:\c8 -> empty Path while publishing an uninitialized worker journal
GREEN: pwsh -NoProfile -File Tools\windows\Tests\UiCaptureDriver.Tests.ps1 -MatchedScenarioContractOnly -ScratchRoot C:\am7 -> 8/8 passed
REGRESSION: pwsh -NoProfile -File Tools\windows\Tests\ValidationRunner.Tests.ps1 -> UiCaptureDriver 182/182 passed; ValidationRunner.Tests.ps1 PASS

Additional validation:

• Deterministic hardening -> repeated runs 3/3 passed.
• PowerShell parser, git diff --check, and LF checks -> passed.
• Failed prelaunch action root C:\c8 preserved with zero owned survivors; no product action completed.

Checklist

• I have read the Contributing Guidelines
• I have signed off my commits (git commit -s) per the DCO
• Tests pass locally (make test)
• Code follows the existing style (make check)
• I added the test/contract before the implementation and observed the intended RED failure