test(objectql): the no-artifact restatement pin asserts the row's own binding as _packageId

With no artifact present the hydrator still grafts nothing (_provenance org,
the row's own _lock, no _packageVersion); the _packageId it carries is the
row's package_id column, read, not invented.

Claude-Session: https://claude.ai/code/session_01P88ehrZ6hM19hBzdpsQTTo
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/objectql/src/protocol-derived-provenance-doors.test.ts

@@ -411,7 +411,12 @@ describe('#16702 criterion 5 — mergeArtifactProtection precedence is unchanged
         const hydrated = engine.registry.getItem<Record<string, unknown>>('app', 'pet_hospital');
         expect(hydrated?._provenance).toBe('org');
         expect(hydrated?._lock).toBe('none');
-        expect(hydrated?._packageId).toBeUndefined();
+        // [#23233] The row's OWN package binding (its `package_id` column), as a
+        // list read always stamped it — read from the row, not invented and not
+        // grafted: no artifact exists, so `_provenance` stays `org`, `_lock`
+        // stays the row's own and no `_packageVersion` appears.
+        expect(hydrated?._packageId).toBe(PKG);
+        expect(hydrated?._packageVersion).toBeUndefined();
     });
 });