fix(orchestrator): verify owner lock identity before protecting runs

[moncher-dev]

Tracked separately because this review item is non-blocking and requires extending live-owner identity data beyond the current ownership-token contract. The current guard remains fail-closed when a foreign PID is live.