fix(checkpoint): never write in a dry run, and apply a choice only once

A dry run returns before any write even when a recorded choice settles a checkpoint, and a choice from an earlier run only selects the copy, so it never moves an advanced ref back or reports up-to-date refs as would-migrate.