The capability registry resolves through the declared bond resolution, not by shadowing: a chain with the node winning per id

`capabilities-file` in reflection/modules/checks.nu resolved the capability registry per FILE — the project overlay if present, else the shipped one — and its own comment warned about the neighbour