feat(core,clients): one rumble policy engine for every platform (rumble root fix D)

punktfunk-core client/rumble.rs: a per-connection policy engine consumes seq-gated wire
updates and emits EFFECTIVE actuator commands — re-emits on renewals (duration APIs stay
re-armed), self-silences at the v2 lease, a UNIFORM 1 s legacy-host staleness replacing the
per-platform zoo (Apple 1.6 s / Android 60 s / SDL 1.5 s / Deck 1 s), quirk-declared
actuator keepalives (Deck 40 ms + LSB dedupe-defeat jitter), and one stop per buzzing pad
on connection close. Per-pad mailbox semantics: a stalled embedder wakes to ONE current
command, and a stop can structurally never be the update an overflowing queue drops.

New API/ABI: NativeClient::{next_rumble_command,set_rumble_quirks} +
punktfunk_connection_next_rumble_cmd/_set_rumble_quirks (next_rumble/next_rumble2 stay for
un-migrated embedders; both consumers are fed). Migrations DELETE the platform forks:
pf-client-core loses RumbleState + the Deck keepalive loop + LEGACY_RUMBLE_CEILING_MS and
physically silences a slot at close; Android loses the 60 s legacy one-shot (backstop
repack, cancel-on-zero); Apple loses envelopeDeadline + sessionStaleSeconds + both tick
watchdogs (CoreHaptics realization untouched; mac xcframework rebuilt locally).

design/rumble-root-fix.md par. D. Engine 10/10 unit tests; core tests 176 Linux / 175
Windows + clippy -D warnings; swift build + RumbleTuningTests; Kotlin + android-native
compile green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

crates/punktfunk-core/src/client/pump.rs

@@ -40,6 +40,7 @@ pub(super) async fn run_pump(args: WorkerArgs) {
         frames,
         audio_tx,
         rumble_tx,
+        rumble_feed,
         hidout_tx,
         hdr_meta_tx,
         host_timing_tx,
@@ -578,7 +579,10 @@ pub(super) async fn run_pump(args: WorkerArgs) {
                         };
                         if fresh {
                             let ttl = u.envelope.map(|e| e.ttl_ms);
+                            // Both consumers are fed; an embedder drains exactly one of them
+                            // (the legacy queue, or the policy engine's command API).
                             let _ = rumble_tx.try_send((u.pad, u.low, u.high, ttl));
+                            rumble_feed.wire_update(u.pad, u.low, u.high, ttl);
                         }
                     }
                 }