feat(chat): Campaign CH slice CH3 — side-channel membership, wire, and echo parity

Ports retail's SendTurbineChat (@0x0057db10) local pre-send membership gate
so Roleplay/Society/Olthoi stop silently swallowing outbound chat: a new
TurbineChatMembershipGate checks Turbine availability and the player's own
Hear*Chat option before sending, raising "Turbine chat is not available."
or the 0x0551 YouAreNotListeningTo_Channel refusal through the CH2 AddText
chokepoint instead. Wired into both the graphical (LiveSessionCommandRouter)
and headless (DirectGameRuntimeCommandAdapter) send paths so they can't
diverge. Retracts the 26-day-old false "ACE doesn't run a TurbineChat
server" claim from ISSUES.md, the roadmap, and project_chat_pipeline.md —
ACE's TurbineChat implementation is complete and on by default; the real
bug was treating Hear*Chat as a display filter instead of room membership.

Also: implements SetSingleCharacterOption (0x0005), the only wire message
that actually joins/leaves a Turbine room, and wires the five Settings Chat
toggles to it (publish on Save, changed bits only) plus seeds ChatSettings
from the server's own CharacterOptions2 on every PlayerDescription. Fixes
the legacy-channel double-print (Fellow/Vassals/Patron/Monarch/CoVassals
skip the local echo now that ChatChannelInfo.IsSelfEchoChannel is finally
consulted). Routes /a to Turbine unconditionally (retail's @a never falls
back to the legacy bitflag) and adds /ab for the legacy AllegianceBroadcast
verb retail actually has. Surfaces a nonzero TurbineChat ack HResult instead
of discarding it silently. Deletes the malformed, callerless SetCharacterOptions
(0x01A1) and AddChannel/RemoveChannel (0x0145/0x0146) builders.

Files every AC-specific algorithm change cites the named retail decomp
(SendTurbineChat 0x0057db10, StartupTurbineChatSystem 0x0057EFB0,
GameActionSetSingleCharacterOption) plus ACE/holtburger cross-checks.
Register rows AP-181 (no client-side spam throttle) and UN-9 (an
incidentally-discovered CharacterOptions1.Default literal mismatch, not
investigated further) filed per the divergence-register rule.

11,957 passed / 4 skipped / 0 failed (full Release suite, up from the
11,916/4/0 baseline).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/AcDream.Runtime/GameRuntimeCommands.cs

@@ -76,6 +76,17 @@ public enum RuntimeChatChannel
     Roleplay,
     Society,
     Olthoi,
+
+    /// <summary>
+    /// Campaign CH slice CH3 (2026-08-09): the legacy
+    /// <c>ChatChannel.AllegianceBroadcast (0x02000000)</c> — the monarch/
+    /// speaker-permission broadcast bound to retail's <c>@ab</c> verb.
+    /// Distinct from <see cref="Allegiance"/>, which is ALWAYS the Turbine
+    /// room now (retail's <c>@a</c> binds unconditionally to
+    /// <c>DoTurbineChat_Allegiance</c> once Turbine chat starts — see the
+    /// research doc §4.3/§6.7).
+    /// </summary>
+    AllegianceBroadcast,
 }
 
 public readonly record struct RuntimeChatCommand(
@@ -227,9 +238,18 @@ public interface IRuntimeCharacterCommands
         RuntimeGenerationToken expectedGeneration,
         in RuntimeAdvancementCommand command);
 
-    RuntimeCommandResult SetOptions1(
+    /// <summary>
+    /// Retail <c>SetSingleCharacterOption (GameActionType 0x0005)</c> —
+    /// toggles one character option. Campaign CH slice CH3 (2026-08-09)
+    /// replaced the former <c>SetOptions1</c> (the malformed, callerless
+    /// full-Options1-blob 0x01A1 builder) with this: the only wire message
+    /// that actually changes Turbine room membership for the six
+    /// <c>ListenTo*Chat</c> ids.
+    /// </summary>
+    RuntimeCommandResult SetSingleOption(
         RuntimeGenerationToken expectedGeneration,
-        uint options);
+        uint optionId,
+        bool value);
 }
 
 public enum RuntimeFriendCommandKind