In the end, we were advised by ServiceNow support to stop using the legacy Integration - Microsoft SCCM 2016 - and switch to Service Graph Connectors.   This solved the issue as reported, the Robust Transformer did a much better job at identifying whether to update a device or create a new one, but we had some extensive cleanup to complete afterwards.