Separate Your Domains: NIST PQC KEMs, Oracle Cloning, and Read-Only Indifferentiability