Lighting Booth Keycard Afteruse Review

The review opens only when a future reader tries to consume an old lighting-booth keycard as current access proof.

Branch families:

• certify_keycard_scope keeps the old swipe useful but scoped;
• split_keycard_from_booth_access separates the artifact from current entry;
• attach_lock_provenance_note requires lock-log proof;
• notify_excluded_light_reader warns the harmed cue reader;
• convert_to_route_access_annotation makes it an annotation, not clean access;
• quarantine_uncited_keycard_copy freezes the copy until proof appears;
• false_clean_keycard_default arms a durable recovery-only default;
• future_effect_any must be visible in replay/counters.