1a5547c5c5
Hardening follow-up to #95396 (#95628): ignore primary connection-id writes while the active key is a composite secondary scope, so future presentation-layer writes cannot relabel the primary socket and poison new-session routing. Regression test is sabotage-proven (fails with the guard reverted).