Fix drawing state and lexical series identity

[luisleo526]

What changed

• Preserve target-typed drawing na, drawing history, and cloned call-site storage across generated C++ state.
• Track exact lexical declaration identity so same-named callable locals, parameters, loop binders, and tuple binders cannot alias unrelated series storage.
• Lower UDF and TA tuple results through the correct history-aware storage, including nested/callable return paths.
• Preserve input-derived request.security initialization semantics covered by the consolidated validation suite.

Why

Several independently correct-looking name-based rewrites could combine to hide a semantic miscompile. Raw identifier unions and call-site remaps were conflating distinct lexical bindings, especially when drawing handles, persistent callable locals, parameters, loops, and tuple destructuring reused names. The generated program could compile and still read or write the wrong series state.

This patch makes storage selection declaration-aware and adds permanent adversarial coverage for the previously masked combinations.

Validation

• Full Python suite: 1976 passed, 2 skipped, 0 failed.
• Pyodide parity gate: 277/277 classified as expected (263 OK + 14 expected errors), CPython/WASM parity green.
• Complete N=3 bug-masking matrix: 8/8 cells passed for callable persistent siblings, series-parameter isolation, and lexical binder identity.
• Complete drawing N=5 matrix: 32/32 cells passed.
• Complete init-order N=5 matrix: 32/32 cells passed.
• Full 415-strategy scraper gate: 408 OK + 7 expected outcomes, no compile/driver/timeout failures, no tier downgrades.
• Corpus score stayed Excellent 352 / Strong 47 / Moderate 4 / Weak 3; this milestone is a semantic-correctness fix rather than a score-only change.