fix(pair-corpus-honesty): re-harvest curl/OpenSSL excerpts, restore Juliet fixtures

Tasks 3.3 and 4.1.

- vfc curl and openssl-cve-2021-3449 excerpts re-harvested through the
  shared library: whole functions with upstream_start headers, the
  vendored key redacted code-safely, no truncated bodies.
- vfc/recipes.toml carries mode, fix_path and function anchors;
  training/manifest.jsonl regenerated.
- Juliet CWE-121 strcpy pair gets its buffer declarations back so the
  vulnerable side is a real overflow again.

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG

benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/fixed.c

@@ -7,13 +7,8 @@
  * license: curl
  * function: Curl_open
  * relpath: lib/url.c
- */
-
-* Curl_open()
- *
- * @param curl is a pointer to a sessionhandle pointer that gets set by this
- * function.
- * @return CURLcode
+ * provenance: human
+ * mechanism: other
  */
 
 CURLcode Curl_open(struct Curl_easy **curl)