Open an existing embedding database strictly read-only for final receipt
validation. This function never bootstraps, rebuilds, migrates, or writes the
configured SQLite family: missing files and legacy/incompatible authority
schemas are rejected. It does hold private shared coordination markers for
the reader lifetime. The main/WAL/SHM/rollback-journal family is checked
before dependency loading and again immediately before native open; every
present leaf must be a singly linked regular file and the main must exist.
Open an existing embedding database strictly read-only for final receipt validation. This function never bootstraps, rebuilds, migrates, or writes the configured SQLite family: missing files and legacy/incompatible authority schemas are rejected. It does hold private shared coordination markers for the reader lifetime. The main/WAL/SHM/rollback-journal family is checked before dependency loading and again immediately before native open; every present leaf must be a singly linked regular file and the main must exist.