fix(analyzer): path-qualify SERVICE node IDs to break PK collisions

[aksOps]

Summary

`ServiceDetector` emitted node IDs as `service:`. In real polyglot codebases two modules can share a service name (e.g. `frontend/widgets/checkbox/` and `backend/components/checkbox/` both with `name = "checkbox"` in pyproject.toml) and the IDs collided. Kuzu's `BulkLoadNodes` COPY aborts the whole batch on duplicate PK — `codeiq enrich ~/projects/` exited non-zero with:

```
Copy exception: Found duplicated primary key value service:checkbox
```

Fix

• Switch IDs to `service::` (e.g. `service:frontend/widgets/checkbox:checkbox`).
• Root module (empty dir) uses `.` so the format stays consistent with the existing `FilePath` stamping at line 171.
• Flip CONTAINS edge IDs from `edge:service::contains:...` to `edge:<sn.ID>:contains:...` — `sn.ID` is now the path-qualified identifier, `sn.Label` remains the friendly display name.

Test plan

• `cd go && CGO_ENABLED=1 go test ./... -count=1` — 878 passed across 45 packages
• New regression test `TestServiceDetectorPathQualifiedIDsBreakCollision` (fails on main, passes here)
• Existing test `TestServiceDetectorTwoModules` updated for new ID format
• After fix(mcp): correct dispatch arg names in 7 consolidated modes #149 + fix(enrich): pipe-delim COPY staging so JSON commas don't break Kuzu #150 + this land — re-run `codeiq enrich ~/projects/` end-to-end, verify no duplicate-PK abort and edges populated

🤖 Generated with Claude Code