参考所有分组，完成尽量多的内容。禁止顺手扩功能 smoke

结论：收敛第 2/6 组 manifest/source-link 约束，公共 manifest source lister 只接受单个 manifest group 名称或 all，拒绝 core,header 这类复合 filter，避免 source coverage 查询静默误用；未扩展 smoke 功能。验证：CNC_SIM_ALL_NATIVE_GUARDRAILS_ONLY=1 ./test-all-native.sh、./test-native.sh、./test-linuxcnc-source-link.sh 均通过。

test-all-native.sh

@@ -1171,6 +1171,15 @@ if grep -E '\.(hh|h)$' <<<"$native_manifest_core" >/dev/null; then
     echo "native manifest core compile group includes headers" >&2
     exit 1
 fi
+if ./list-linuxcnc-source-manifest-sources.sh "$manifest" core,header >"$unknown_filter_log" 2>&1; then
+    echo "native manifest source lister accepted a compound filter" >&2
+    exit 1
+fi
+if ! grep -F "manifest source filter must be a manifest group name: core,header" "$unknown_filter_log" >/dev/null; then
+    echo "native manifest source lister did not report compound filters clearly" >&2
+    sed -n '1,20p' "$unknown_filter_log" >&2
+    exit 1
+fi
 if ./list-linuxcnc-source-manifest-sources.sh "$manifest" bogus >"$unknown_filter_log" 2>&1; then
     echo "native manifest source lister accepted unknown filter" >&2
     exit 1