Review findings on the id-based repair:
- an open repair of one unnamed account was reused for another, because
the operation lookup matched only connector and alias; it now matches
the repaired account id too
- a session retry carrying another account's id re-minted the open
target; it is refused like a retry naming another alias
- reconnect by label restarted a healthy unnamed account; only a repair
a surface asked for by id skips the healthy check
- reconnect by label with force sent the label as an alias; the label
now resolves to the account id first