fix(0114): gate alias-qualified calls to one-level carry, pin to target

The lowerCall namespace branch routed alias.fn() through the global
qualified registration (first-wins) at any import depth, and through the
global last-wins bare map for comptime/generic members. Plain-identifier
alias roots now resolve via the carry-aware namespaceAliasVerdict:

- visible alias (own edge or ONE flat hop): the member dispatches the
  TARGET module's own fn (namespaceFnMember + fd-keyed bareAuthorFuncId),
  so two modules' same-named aliases each call their own target.
- two direct flat imports carrying the alias to distinct targets:
  loud ambiguity diagnostic.
- alias only reachable beyond one hop: "namespace 'X' is not visible".
- foreign / builtin / #compiler members keep the literal-symbol path.

Regressions: examples 0832 (two-hop), 0833 (carried collision),
0834 (own-target pin / first-wins repair).

examples/0832-modules-namespace-alias-two-hop-not-visible.sx

@@ -0,0 +1,15 @@
+// Namespace aliases carry ONE level: an alias declared by a module is
+// usable in that module's DIRECT flat importers only. Two flat hops away
+// (`facade.sx` declares `t`, `facade2.sx` flat-imports facade, this file
+// flat-imports facade2) the alias is NOT visible — the carry does not
+// chain, mirroring bare-name non-transitivity (0763).
+//
+// Regression (issue 0114): the bare `alias.fn()` call path used to serve
+// this from the global qualified registration at any import depth.
+
+#import "modules/std.sx";
+#import "0832-modules-namespace-alias-two-hop-not-visible/facade2.sx";
+
+main :: () {
+    print("{}\n", t.helper());
+}