Issue #3582706: Scope unique constraint validation per domain
DomainPathUniqueConstraintValidator was using the full DomainPathAliasManager which falls back to core aliasing. This caused aliases from other domains to trigger false duplicate violations.
Fix: use DomainAliasRepository directly to check only aliases for the specific domain.
Also adds two kernel tests:
- Same alias on different domains should pass validation.
- Same alias on the same domain should still fail.
Closes #3582706