fix: lower negated row takes as exclusions

[lance-gatefixer]

Summary

• lower negated row-system-column IN predicates into block-list take selections
• translate row addresses and row offsets into the row-id domain before applying inclusion or exclusion masks
• cover complement results end to end for _rowid, _rowaddr, and _rowoffset

Root cause

TakeOperation::try_from_expr matched Expr::InList without preserving its negated flag, so NOT IN was serialized as an allow list and returned exactly the listed rows. The take selection now carries its polarity and serializes negated lists as block masks, including the _rowoffset path that cannot use normal filter refinement.

Validation

• cargo fmt --all -- --check
• cargo test -p lance test_filter_to_take --lib
• cargo clippy --all --tests --benches -- -D warnings

Fixes #9080

[lance-gatekeeper]

✅ Gate recommendation: approve.

Negated _rowid, _rowaddr, and _rowoffset lists now preserve their polarity and lower through exclusion masks in the correct row-ID domain. This closes the earlier offset gap while keeping deletions, stable row IDs, and caller masks on the existing filtered-read path.