CompatScope

- Fixed first-use SAFE Apply backup ordering so rollback can restore the true pre-apply state when the generated datapack did not exist yet.
- Hardened resource scanning against oversized or size-unknown ZIP/JAR entries by bounding the actual decompressed read to 16 MiB.
- Fix History mutations now refuse to overwrite an unreadable/corrupted history file instead of silently treating it as empty.
- Hardened atomic persistence for Fix History, diagnostic snapshots and generated patch files; failed writes clean up temporary `.tmp` files while preserving the original failure.
- Runtime log tail reading now drops an incomplete first line when the 2 MiB window begins in the middle of a log entry, reducing malformed/spurious runtime findings.
- Generated-state verification now checks file size before reading content, keeping equality checks bounded to the expected generated resource size.