no-mistakes(review): Canonicalize guest identities in GC report-only gate

tests/test_disk_gc_report_only.py

@@ -61,6 +61,20 @@ def test_exclusion_matches_on_any_identity_key(tmp_path):
         assert all(r["action"] == "report-only" for r in plan), (entry, plan)
 
 
+def test_exclusion_matches_encoded_identities(tmp_path):
+    """A differently-encoded CT 111 id must not slip past the gate to gc-executor."""
+    encodings = ({"id": 111.0},
+                 {"id": "111.0"},
+                 {"id": "lxc/111"},
+                 {"id": "qemu/111"},
+                 {"id": "0111"},
+                 {"id": "  111  "})
+    for alias in encodings:
+        plan = _plan([{**alias, "usage_pct": 97}], tmp_path)
+        assert plan, alias
+        assert plan[0]["action"] == "report-only", (alias, plan)
+
+
 def test_our_own_guests_still_get_gc(tmp_path):
     """acerpve .9 and amdpve .15 are ours — they must still be acted on."""
     plan = _plan([{"hostname": "acerpve", "ip": "192.168.68.9", "usage_pct": 77},