Publish Build 8 authority and causal-logging handoff

[flashls1]

Why

GitHub master predates the playable native Build 8 implementation and its current graphics evidence. This PR publishes the existing branch and reconciles every current authority without rebuilding, re-signing, restarting, or otherwise disturbing the installed app.

What changed

• Records the latest automatic capture: 42m27s, 144,364 frame intervals, 99.629% exact-layer coverage, 189 incidents, 56.98 weighted FPS, 21.49 FPS 1% low, 21.51ms p95, and 33.434ms p99.
• Makes the receipt-verified game path direct Unreal Vulkan through gfxstream/ASG, host Vulkan, MoltenVK, and Metal; ANGLE is conditional.
• Treats match, combat, battle, and result markers as optional annotations and excludes the final Mac presenter from causal candidates.
• Records automatic logging as verified while keeping internal causal attribution and the source-instrumented causal logger explicitly UNKNOWN / PLANNED.
• Separates stock Build 8 normal-play authority from the isolated, non-comparable tftmac-runtime diagnostic repository.
• Separates historical Build 8 signing acceptance from the current host audit: release hashes match, but the login keychain has zero valid identities and deep/strict verification reports CSSMERR_TP_NOT_TRUSTED.
• Archives superseded documentation while leaving concise current replacements at the original paths.
• Splits repository/CI verification from local-only installed-runtime verification and updates checkout to actions/checkout@v7.0.1 with Node 24 retained.

Verification

• scripts/verify-tftmac.command: PASS
• Unsigned Release compilation: PASS
• Native tests: 43 passed, 0 failed
• Engineering-map and performance-lab SQL self-tests: PASS
• Authority hashes and exact-key effective SQL policy: PASS
• Private/raw artifact scan: PASS
• scripts/verify-installed-runtime.command: expected non-pass because the current signing identity is unavailable; installed executable and emulator-host hashes match the historical Build 8 receipt

Excluded by design

No SQLite capture, trace, screenshot, login/OCR probe, recovery app, credentials, AVD data, APK, runtime binary, release, tag, or downloadable app is included. The installed playable app was not rebuilt, re-signed, launched, restarted, or changed.