The container harness pinned the pre-multiplex-only contract (a named profile brings up its own s6-supervised gateway). Under #118273 + this PR that start is refused: the slot stays registered (DOWN) so `--force` has something to drive, and the refusal names `--force` and `migrate --multiplex`. Split into the refusal invariant and the `--force` start/stop control.