Native reader labs + Brain v4: exhaustive device evidence and repair loop

[niakw]

Final consolidated change

Native evidence

• canonical provider media types remain movie | tv | anime; client aliases are normalized only at the Nuvio request boundary
• exhaustive route labs traverse every platform-compatible manifest provider, including enabled:false, and every returned stream
• representative catalogue routes cover movie, TV/series and anime, including non-blocking tv/anime capability probes
• NuvioTV and NuvioMobile use the official Android client/player path; Desktop native proof uses official macOS and Windows bridges only (Linux stub is explicitly excluded)
• evidence follows repository load -> provider load -> provider HTTP -> result -> native player -> frontend phase, with raw signed URLs/credential values excluded from persisted artifacts

Brain v4

• incomplete evidence is fail-closed: no learning and no repair planning
• repository/Core/load failures cannot become arbitrary provider-JS mutations
• the Android workflow contains the bounded Brain repair sandbox (up to 24 provider candidates) and requires a fresh all-provider/all-stream NuvioTV Sinners retest before comparison
• persistent native-reader repair memory preserves prior outcomes and imported run IDs across daily Brain cycles
• reader-learning import is idempotent, automatic only for trusted push runs on main, and missing comparison artifacts do not consume a run ID, so a later rerun remains learnable

Speed and cache safety

• AVD snapshots and Gradle caches are reused
• Nuvio profile/settings/plugin state are preserved rather than cleared between fixtures
• exact repository installs/provider caches are reused
• generated/local repair repositories are content-addressed so a warm profile cannot reuse stale candidate JS

CI cleanup

PR validation is reduced to five complementary workflows:

1. provider pipeline
2. canonical media/evidence/Brain gate
3. GitHub Actions workflow-security gate
4. native Android TV/Mobile reader
5. native Desktop macOS/Windows reader

The targeted device corpus remains available manually only. Superseded acceptance/targeted/final-v2/engine-v2/dependency workflows, mutable-client transport CI, legacy Linux/Desktop corpus/visual labs, permanent stale-ref labs and provider-specific Desktop staging CI are removed. Temporary playback-hotfix manifests/bundles are also removed.

README and architecture tests are aligned with this final topology.

This is the clean one-commit replacement for #67; #65 and #67 are closed as superseded.