Improve exec capture and process attribution

[rhythm-c]

• Reassemble exec arguments from bounded kernel fragments
• Confirm successful exec with sched_process_exec
• Supplement truncated argv from /proc//cmdline
• Preserve parent-process context for downstream Agent attribution
• Expose explicit truncation, incomplete and drop counters
• Extend smoke and unit coverage