STEP_050M07R20QH: fix watcher mapper lock re-entry and topology transport unknown-host-key acceptance; controlled vpn2 failure proved bridge-first local continuity, VM100 evacuation, ACK and NORMAL restoration