wouldReindexForwardedOutput quadratic DoS

Trap: recomputing the complete visible-output projection for every recall argument delta looks safest because any frame might affect coordinates, but sorting accumulated items and scanning forwarded indices per frame creates an algorithmic DoS within valid byte/frame limits. Fix: run the expensive check only when an output index first becomes recall-private, retain source indices on deferred events, and update projection state incrementally.