_record_owed_gateway_inventory returned for any existing inventory, so a
same-SHA retry that stopped an unmapped gateway while the mapped one stayed
down recorded a gateway_restart follow-up but never added the stopped PID to
the durable owed set; once the mapped gateway recovered, startup settled the
obligation with no successor for the unmapped one. A readable inventory now
only grows (earlier rows and record provenance kept); a malformed or
unsupported one is still left untouched.