Generalize the delete walker's protected-root-child skip into a prefix list. The receiver now passes both the --delay-updates staging directory and every basis-dir path, so a --delete run can never treat a basis snapshot (which a --link-dest run just linked from) as destination content to remove.