fix(ui): morning gate — map town markers: green rollover highlight + the authored map-note tooltip skin/font

User finding 3 (retail screenshot): hovering a town on the Map tab turns
its marker GREEN and shows the name on a special-font tooltip — clearly
not our generic 0x10000395 popup skin, and we had no hover highlight at
all.

Re-derivation (live-DAT probe + raw ElementDesc dump + surface
byte-decode; MapNoteLiveDatTests pins all of it):

- m_pMap (0x100001EC)'s P0x47/P0x48 = 0x100001F0 @ 0x21000026 are the
  note CONSTRUCTION template (AddMapNote @0x004a1bb0's
  CreateChildElement args) — that part we had right.
- The TEMPLATE's own DirectState authors the note's tooltip popup
  locator P0x47=0x10000398/P0x48=0x21000041 — the FOURTH popup skin,
  whose incorporated text child 0x10000396 fonts 0x40000015 where the
  other three skins font 0x40000002 (the user's "special font") — plus
  P0x50=0.0 (zero per-element tooltip delay: town tooltips fire the
  instant the dwell arms; UiRoot already honors it), P0x4B TooltipOn,
  and P0x13 RolloverEnabled. Batch C's "the template authors no locator
  of its own" claim was WRONG, and BuildTownMarkers' hardcoded
  shared-skin override was clobbering the authored values — removed.
- The hover highlight: the template's Normal/Normal_rollover states are
  PassToChildren descriptors driving the swallowed highlight child
  0x100001F1 (base 0x100002B7@0x21000042 — a four-piece frame all
  drawing 0x06004CC9, byte-decoded PURE GREEN A=FF R=00 G=FF B=00) via
  per-state P0x3B (Invisible): hidden at rest, green on rollover.

Port:
- UiButton.CascadeStateToChildren — retail UIElement::SetState
  @0x00464E70's PassToChildren cascade, keyed off the REQUESTED state id
  (properties commit unconditionally; only the sprite draw is art-gated,
  the existing #382/AP-222 distinction).
- UiDatElement.TrySetRetailState honors per-state P0x3B for NAMED states
  (OnSetAttribute @0x00462d80 case 8: SetVisible(value==0)). The
  unnamed-DirectState case is explicitly excluded — honoring it would
  un-gate ISSUES #408 (1,083 authored-invisible elements) through
  BuildWidget's post-children state reapply; measured breaking the
  spell-favorite drag tests before the scoping (note added to #408).
- MapPageController.BuildTownMarkers rebuilds the button-swallowed
  highlight child per marker through the AD-108 IconBuilder seam
  (Bindings.TemplateInfoResolver, backed by
  RowTemplateResolver.ResolveInfo — same cache) and arms it with the
  initial Normal cascade.

Register TS-85's Batch C paragraph corrected; RetailTooltipPresenter's
F10 shared-skin remark updated (MapPageController no longer a consumer).
Tests: 3 installed-DAT pins (locator/delay/rollover; per-state P0x3B +
green frame; the four-skin font sweep), UiButton cascade + UiDatElement
P0x3B units, MapHousePanel marker no-clobber + hover-highlight fixture.
App suite 5487 passed / 3 skips (5490 total, +11 over baseline);
Runtime 1744/1744.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/AcDream.App/UI/Layout/RetailTooltipPresenter.cs

@@ -369,13 +369,18 @@ public sealed class RetailTooltipPresenter : IDisposable
     /// </summary>
     /// <remarks>
     /// Night-round review F10: previously duplicated as three separate
-    /// private constants with three separate partial citations — this
-    /// class's own world-hover popup (below), <c>UiItemSlot</c>'s item-cell
-    /// popup, and <c>MapPageController</c>'s town-marker popup. All three
-    /// consumers now reference these SAME two constants; this is the ONE
-    /// citation. This class is the natural owner since it's the mount
-    /// point every one of the three consumers ultimately routes through
-    /// (<c>OnTooltipShow</c>/<c>UpdateWorldHoverTooltip</c> both call
+    /// private constants with three separate partial citations; this is the
+    /// ONE citation. Two consumers remain — this class's own world-hover
+    /// popup (below) and <c>UiItemSlot</c>'s item-cell popup.
+    /// <c>MapPageController</c>'s town markers were REMOVED from the list at
+    /// the 2026-08-17 morning gate round (finding 3): the hotspot template
+    /// (<c>0x100001F0</c> in <c>0x21000026</c>) turned out to author its OWN
+    /// popup locator (<c>P0x47=0x10000398</c>/<c>P0x48=0x21000041</c> — the
+    /// fourth skin, whose incorporated text child fonts <c>0x40000015</c>
+    /// where the other three font <c>0x40000002</c>), which the earlier
+    /// shared-constant override was clobbering. This class is the natural
+    /// owner since it's the mount point every consumer ultimately routes
+    /// through (<c>OnTooltipShow</c>/<c>UpdateWorldHoverTooltip</c> both call
     /// <c>TryBuildAndMountPopup</c> with these values or a widget's own).
     /// </remarks>
     public const uint SharedPopupSkinRootElementId = 0x10000395u;