fix(update): preserve recorded install source

[cursor]

Summary

• Preserve recorded install state as the update source of truth.
• Prevent tracked script or binary installs from being reclassified through candidate managed methods such as pip.
• Add regression coverage for provider resolution, update command planning, and package-manager fallback behavior.

Linked Artifacts

• Issue: n/a
• ADR: n/a
• OpenSpec: openspec/changes/fix-recorded-update-source
• Discussion: n/a

Validation

• bun run memory:check
• bun run lint
• bun run format:check
• bun run typecheck
• bun run test (if behavior changed)
• Not run, explained below

Additional validation:

• bun run openspec:validate
• Main-branch reproduction: applied only the new regression tests to origin/main and confirmed the focused suite fails before the fix.

Release Intent

• Release: patch - bug fix

Docs Updated

• Not needed
• docs/...
• openspec/...
• Follow-up issue or OpenSpec change created instead

Scope Check

• I did not add a new ad hoc root-level Markdown file.
• I updated the relevant issue, ADR, spec, runbook, or captured the missing doc work as follow-up.
• I did not silently expand project scope without recording it explicitly.

Closure Check

• Working tree was clean after commit.
• Branch was pushed and this PR is the active delivery artifact.
• OpenSpec change is not needed, still active by design until merge, already archived, or queued for agent-driven archive closure.
• Release is not applicable, delegated to release automation, or verified.

Notes

On current origin/main, the added regression tests fail because recorded script installs are planned as managed updates and fallback execution can persist an unrelated managed state. This PR stops provider resolution at recorded state, only returning a managed updater for recorded managed install types, and removes the preferred-state fallback to unrelated candidate methods.