android: the handoff — the pending rounds, the pipeline, and what is unverified

Everything written this session that has not been through the device: rounds 43
to 48 (each patch adversarially verified, 43's transient-notice expectation
fixed), a partial round 49, the pipeline scripts, the Android Auto design and
the icon comparison mock. Also the two harness changes that were never A/B'd —
adaptive waits, which may only shorten a declared wait and never lengthen it,
and a ship that runs the mock walk and the deploy at the same time. The A/B and
its 255-step baseline are in handoff/tools; main stays at what the phone has
actually walked.

handoff/rounds/ins-r39-doc-weather.txt

@@ -0,0 +1,6 @@
+two safe steps of its own (`trouble-words`: eleven real backend strings through
+`__ss.say` on the device, every output asserted free of Rust; and
+`trouble-xfer`: one already-failed transfer row written into the store and
+taken away again — nothing fetched, and a terminal row is not in flight, so
+nothing reaches the shade). Fifteen more mock steps drive the failure faces
+themselves, which are described under **When things go wrong**. A mock step can