Fix worker done pane identity

Fixed identity verification for worker_done and heartbeat messages to ensure they can only be sent from the correct dispatched pane. The system now properly rejects messages with mismatched sender identities and reconstructs lifecycle payload fields to prevent identity spoofing. Worker processes without a resolvable sender identity will now fail with a clear error instead of silently succeeding.