Merge phase5-cleanup: Phase 5 non-money close-out (steps 1–6)

Closes Mountain 1's client-side cleanup phase:
- step 1: version-string truth (bundle-derived)
- step 2: dead-end honesty (Tournament Register + Active Sessions)
- step 3: compliant Apple Music text attribution (drop recreated logo)
- step 4 (#43): no notification-permission ask in the MVP build
- step 5: removed orphaned SceneDelegate + dead 2nd RootView
- step 6a: removed 8 orphaned dead-code files (HealthKit/CloudKit/Notif/CarPlay)
- step 6b: excised Telegram from owner identity (adversarial-verified behavior-preserving)

Plus: baseline test-fix (stale test_403 -> securityBlocked; full 117-suite adopted as
the verification baseline), MicaPlayer sim-crash env note, games-workstream plan doc.
Full 117-suite green throughout.

Author: Neo