Check what a mapping is pointed at on every write path

Prevents Manager-role users from silently repointing mappings through direct API calls, bypassing adoption checks.