refactor: drop milestone names + consolidate clients; loss-recovery & rumble fixes

Two bodies of work in one commit (the rename moved files the fixes also touched).

Naming/structure cleanup (pre-launch):
- Host modules m3.rs->punktfunk1.rs, m0.rs->spike.rs; CLI m3-host->punktfunk1-host,
  m0->spike; bare `punktfunk-host` now prints help. Types M3Options/M3Source->
  Punktfunk1Options/Punktfunk1Source.
- Clients consolidated out of crates/ into clients/: punktfunk-client-rs->
  clients/probe (crate punktfunk-probe), client-linux->clients/linux,
  client-windows->clients/windows, punktfunk-android->clients/android/native
  (crate punktfunk-client-android; kept [lib] name=punktfunk_android so the JNI
  contract is unchanged). crates/ now holds only core + host.
- Milestone codes M0-M4 purged from code/CLI/CLAUDE.md/README/docs/docs-site,
  kept only in docs/implementation-plan.md. docs/m2-plan.md->
  docs/gamestream-host-plan.md. CI/gradle/flatpak paths updated.

Client loss-recovery (video froze and never recovered after a brief drop):
- Export punktfunk_connection_frames_dropped through the C ABI (the core already
  tracked it for the client keyframe-recovery loop; it was never reachable from
  the ABI clients). Regenerated punktfunk_core.h.
- Apple (StreamPump + Stage2Pipeline) and Android (decode.rs) now poll
  frames_dropped and request a keyframe when it climbs -- the same loss-driven
  recovery Linux/Windows already had. Under infinite GOP the decoder silently
  conceals reference-missing frames, so the decode-error trigger rarely fires.

Apple rumble robustness (worked then went spotty -- DualSense + Xbox):
- Add CHHapticEngine stopped/reset handlers (rebuild on app background / audio
  interruption / server reset) and drop the permanent `broken` latch on a
  transient drive failure; latch only when the controller truly has no haptics.
- Surface swallowed SDL set_rumble errors on Linux/Windows + diagnostic logging.

Verified: cargo build/clippy/fmt --workspace, C-ABI harness, header drift.
Not runnable on this box (verify in CI): Gitea workflows, gradle/Android,
flatpak, Swift/decky.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs/linux-setup.md

@@ -1,7 +1,7 @@
-# Linux host setup — NVIDIA GPU VM (M0/M2)
+# Linux host setup — NVIDIA GPU VM (pipeline spike + GameStream host)
 
 How to bring up the build environment for the punktfunk Linux host on an NVIDIA-GPU Ubuntu VM
-and run the **M0** capture→encode spike. `punktfunk-core` already builds and is tested
+and run the **pipeline spike** (capture→encode). `punktfunk-core` already builds and is tested
 cross-platform; this is about the platform backends in `crates/punktfunk-host`.
 
 > Target **Ubuntu 24.04 (noble)**: Sway 1.9, FFmpeg 6.1.1, xdg-desktop-portal 1.18.
@@ -77,7 +77,7 @@ ffprobe /tmp/punktfunk-headless-test.mkv         # confirm a real H.265 stream
 
 `wf-recorder` uses `wlr-screencopy` directly (no portal/D-Bus) — the fastest way to
 de-risk the GPU encode path. **Note:** screencopy encodes straight to a file and *cannot*
-feed PipeWire; the real integration uses the ScreenCast portal (see M0). If shell 1 logged
+feed PipeWire; the real integration uses the ScreenCast portal (see the pipeline spike). If shell 1 logged
 a Mesa/EGL fallback (or Sway dropped to pixman) instead of `EGL vendor: NVIDIA`, install the
 NVIDIA GL userspace (§2) — the portal cannot capture a pixman output.
 
@@ -89,13 +89,13 @@ The wlroots-on-NVIDIA env workarounds (`WLR_RENDERER=gles2`, `WLR_NO_HARDWARE_CU
 `GBM_BACKEND=nvidia-drm`, `sway --unsupported-gpu`, …) live in
 `scripts/headless/env.sh` — `source` it before launching anything Wayland.
 
-## 4. M0 proper — wire it into `punktfunk-core`
+## 4. The spike proper — wire it into `punktfunk-core`
 
 Goal (plan §8): headless output → PipeWire ScreenCast → NVENC → a playable file, then feed
 the encoded access units into a `punktfunk_core::Session` (host role). The module seams exist
 in `crates/punktfunk-host/src/{vdisplay,capture,encode,inject,pipeline}.rs`.
 
-**Status: implemented and verified end-to-end** in `crates/punktfunk-host` (`m0.rs`,
+**Status: implemented and verified end-to-end** in `crates/punktfunk-host` (`spike.rs`,
 `capture/linux.rs`, `encode/linux.rs`). After the §3 bring-up:
 
 ```sh
@@ -139,10 +139,10 @@ Crate choices, verified current:
   **Start with the CPU-copy fallback** (download frame → `hwupload_cuda` → `hevc_nvenc`)
   to get an end-to-end stream, then chase true dmabuf zero-copy. The plan flags this
   (§9) and the `capture` module already has a `cpu_bytes` fallback field.
-- **Input (M2):** [`reis`](https://crates.io/crates/reis) (pure-Rust libei — no native
+- **Input (GameStream host):** [`reis`](https://crates.io/crates/reis) (pure-Rust libei — no native
   `libei` needed) with `input-linux`/uinput as the universal fallback.
 
-Then continue toward **M2**: `serverinfo`/RTSP/pairing enough for a stock Moonlight client
+Then continue toward the **GameStream host**: `serverinfo`/RTSP/pairing enough for a stock Moonlight client
 to connect, a KWin virtual output created on connect, input via reis/uinput — the
 shippable milestone.