Includes the shared-statistics/private-participation repair. Reads the service-owned managed-settings projection under its correct effective identity, retaining strict ownership and privacy checks. Includes a queue-only activation bridge for older installations.

Superseded by v7.2.12. The earlier activation can safely refuse with queue_activation_signed_target_changed because the selector chose an unnecessary intermediate version. Use the latest pinned v7.2.12 activation instead. No room restart, credential change or ownership clear occurs on this refusal. Published assets remain immutable.