Revert "Campaign V slice V4a" - it lost world multisampling

This reverts ceec3bc4. Two independent reasons, either sufficient.

The rendering regression. The slice deleted TextRenderGlStateScope, which
saved GL_MULTISAMPLE and GL_SAMPLE_ALPHA_TO_COVERAGE on entry, disabled them
for the text pass, and restored them on exit (TextRenderGlStateScope.cs:111-112
and 153-154 at the parent commit). Its replacement bakes that state into the
text pipeline but nothing restores it, and GlGpuPassEncoder.Dispose does not
either. Every world renderer is still raw GL at this point in the campaign, so
from the first UI frame onward the world drew with multisampling disabled.

The offline pixel gate caught it: 1,791 of 563,200 compared pixels differed,
0.318% against a 0.001 threshold. The commit message attributed this to
wall-clock-driven ambient animation shifting phase, and committed through the
failure. That explanation does not survive its own control: capturing twice at
the reverted-to commit differs by 19 pixels and twice at the slice's own commit
by 8, while base-versus-head differs by 1,791 - a 224x gap that no shared-noise
source explains. An amplified difference image settles it visually: the changed
pixels are the silhouette edges of every tree, building and rock, with terrain
interiors, water and the entire UI untouched. That is the signature of losing
edge antialiasing, not of animated sprites.

This is the exact failure mode two existing memory notes already warn about -
a mid-frame renderer must set every GL state it uses rather than inherit it,
and issue #52's lesson that a rendering migration must audit per-pass GL state
before declaring itself done.

The scope. The brief was three small leaf renderers plus additive frame-
lifecycle wiring, roughly ten files. The commit changed 334 files with 3,665
insertions and 3,845 deletions, including 323 public-to-internal visibility
conversions across the App assembly, 55 test files, two retired conformance
tests, and a self-described temporary escape hatch for bridging raw-GL viewport
textures. Even without the regression, that is not separable into the part
worth keeping and the part worth dropping.

Reverting rather than patching because the good work here - the RHI frame
lifecycle wiring and a genuine render-state-cache staleness fix - is small
enough to redo cleanly against a tightened spec, while untangling it from 300+
files of unrelated churn is not.

Post-revert: Release build clean, App suite back to 3,843 passed / 3 skipped,
offline pixel gate passing at 19 differing pixels.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/AcDream.App/Audio/OpenAlAudioEngine.cs

@@ -1,4 +1,4 @@
-using System;
+using System;
 using System.Collections.Generic;
 using System.Numerics;
 using AcDream.Core.Audio;
@@ -7,8 +7,8 @@ using Silk.NET.OpenAL;
 namespace AcDream.App.Audio;
 
 /// <summary>
-/// OpenAL-backed audio engine (Phase E.2) — faithful to retail's
-/// 16-voice pool and inverse-square falloff behaviour (r05 §5.3).
+/// OpenAL-backed audio engine (Phase E.2) — faithful to retail's
+/// 16-voice pool and inverse-square falloff behaviour (r05 §5.3).
 ///
 /// <para>
 /// Architecture:
@@ -16,7 +16,7 @@ namespace AcDream.App.Audio;
 ///   <item><description>
 ///     Single <see cref="ALContext"/> + <see cref="AL"/> bound to the
 ///     system default device. Cross-platform (WASAPI / WinMM /
-///     PulseAudio / CoreAudio — whichever OpenAL-Soft picks).
+///     PulseAudio / CoreAudio — whichever OpenAL-Soft picks).
 ///   </description></item>
 ///   <item><description>
 ///     Fixed 16-source pool for 3D positional sounds. When all 16 are
@@ -27,13 +27,13 @@ namespace AcDream.App.Audio;
 ///   </description></item>
 ///   <item><description>
 ///     Separate UI source pool (4 sources) for flat 2D UI clicks /
-///     wooshes — not subject to the 3D eviction game.
+///     wooshes — not subject to the 3D eviction game.
 ///   </description></item>
 ///   <item><description>
 ///     PCM buffer cache keyed by Wave dat id so the same footstep isn't
 ///     re-uploaded to the GL-equivalent AL buffers on every hit. Bounded
 ///     by a byte budget (<see cref="DefaultBufferByteBudget"/>) enforced
-///     with LRU eviction — see <see cref="EvictBuffersOverBudget"/>. A
+///     with LRU eviction — see <see cref="EvictBuffersOverBudget"/>. A
 ///     buffer still attached to a live source is never evicted (AL
 ///     rejects deleting a bound buffer); eviction re-queries live AL
 ///     source state rather than tracking a second copy of it.
@@ -60,15 +60,15 @@ internal interface IWorldAudioQuiescence
     void ResumeWorldAudio();
 }
 
-internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiescence
+public sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiescence
 {
-    // ── Backends ─────────────────────────────────────────────────────────────
+    // ── Backends ─────────────────────────────────────────────────────────────
     private AL? _al;
     private OpenAlResourceLifetime? _resources;
     private bool _available;
     private bool _disposed;
 
-    // ── Pools ────────────────────────────────────────────────────────────────
+    // ── Pools ────────────────────────────────────────────────────────────────
     private const int PoolSize3D = 16;  // retail 16-slot voice pool
     private const int PoolSizeUi = 4;
 
@@ -88,7 +88,7 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
 
     private readonly uint[] _poolUi = new uint[PoolSizeUi];
 
-    // ── Buffer cache (Wave dat id → AL buffer) ───────────────────────────────
+    // ── Buffer cache (Wave dat id → AL buffer) ───────────────────────────────
     // Budget rationale: decoded PCM waves run ~100-500 KB each (same sizing
     // as DatSoundCache's payload LRU, which this cache re-uploads from). 48
     // MiB gives comfortable headroom for the working set of a play session
@@ -99,11 +99,11 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
     private readonly Dictionary<uint, uint> _bufferByWaveId = new();
     private readonly AlBufferBudgetTracker _bufferBudget = new(DefaultBufferByteBudget);
 
-    // ── Ambient handles (StartAmbient/StopAmbient) ───────────────────────────
+    // ── Ambient handles (StartAmbient/StopAmbient) ───────────────────────────
     private readonly Dictionary<int, uint> _ambientSources = new();
     private int _nextAmbientHandle = 1;
 
-    // ── Public volume knobs ──────────────────────────────────────────────────
+    // ── Public volume knobs ──────────────────────────────────────────────────
     public float MasterVolume { get; set; } = 1f;
     public float SfxVolume    { get; set; } = 1f;
     public float MusicVolume  { get; set; } = 0.7f;
@@ -219,7 +219,7 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
         _al = null;
     }
 
-    // ── IAudioEngine ─────────────────────────────────────────────────────────
+    // ── IAudioEngine ─────────────────────────────────────────────────────────
 
     public void SetListener(
         float posX, float posY, float posZ,
@@ -241,7 +241,7 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
     }
 
     /// <summary>
-    /// Not exposed on IAudioEngine but used by the hook sink — play a raw
+    /// Not exposed on IAudioEngine but used by the hook sink — play a raw
     /// WaveData blob at a 3D position with full priority/volume controls.
     /// Returns true on success, false if the buffer was rejected.
     /// </summary>
@@ -278,7 +278,7 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
                 if (_pool3D[idx].PlayingGain < effectiveGain) { slotIdx = idx; break; }
             }
         }
-        if (slotIdx < 0) return false;    // no slot quieter than us — drop
+        if (slotIdx < 0) return false;    // no slot quieter than us — drop
 
         var slot = _pool3D[slotIdx];
         _al.SourceStop(slot.SourceId);
@@ -355,7 +355,7 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
         return true;
     }
 
-    // IAudioEngine implementations — the enum-based overloads are less
+    // IAudioEngine implementations — the enum-based overloads are less
     // useful than the raw-Wave overloads above, since the hook sink already
     // has access to decoded WaveData. Left as no-ops for now; R5 defines
     // SoundId as a sparse subset of retail enums.
@@ -366,7 +366,7 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
 
     public int StartAmbient(SoundId id, float x, float y, float z)
     {
-        // Looping ambient — needs a decoded wave + WaveId. The hook sink
+        // Looping ambient — needs a decoded wave + WaveId. The hook sink
         // doesn't route ambient; a separate landblock-attached ambient
         // system (outside R5) will drive this. For now: reserve a handle.
         int handle = _nextAmbientHandle++;
@@ -383,17 +383,17 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
         }
     }
 
-    public void PlayMusic(string resourceName, bool loop) { /* R5 §6 MIDI — not ported */ }
+    public void PlayMusic(string resourceName, bool loop) { /* R5 §6 MIDI — not ported */ }
     public void StopMusic() { /* ditto */ }
 
-    // ── Private helpers ──────────────────────────────────────────────────────
+    // ── Private helpers ──────────────────────────────────────────────────────
 
     private uint EnsureBuffer(uint waveId, WaveData wave)
     {
         if (!_available || _al is null) return 0;
         if (_bufferByWaveId.TryGetValue(waveId, out var existing))
         {
-            // Buffer id 0 is the "unsupported format" negative marker — no
+            // Buffer id 0 is the "unsupported format" negative marker — no
             // payload, not tracked by the budget, nothing to touch.
             if (existing != 0)
                 _bufferBudget.Touch(waveId);
@@ -425,15 +425,15 @@ internal sealed unsafe class OpenAlAudioEngine : IAudioEngine, IWorldAudioQuiesc
     /// <summary>
     /// Evict least-recently-used AL buffers until the resident-byte budget
     /// is satisfied again. A buffer still bound to a live source (3D pool,
-    /// UI pool, or an ambient source) is protected — <c>alDeleteBuffers</c>
-    /// fails on a buffer that's still attached to a source — so eviction
+    /// UI pool, or an ambient source) is protected — <c>alDeleteBuffers</c>
+    /// fails on a buffer that's still attached to a source — so eviction
     /// never targets one; nor does it target <paramref name="protectedBufferId"/>,
     /// the buffer <see cref="EnsureBuffer"/> just created for this call and
     /// hasn't attached to a source yet. If every resident buffer is
     /// protected the budget is temporarily exceeded rather than looping
     /// forever; the bounded pool sizes (16 + 4 + ambient) cap how large
     /// that overage can get. Evicted waves replay through
-    /// <see cref="EnsureBuffer"/> again on next use — re-upload from
+    /// <see cref="EnsureBuffer"/> again on next use — re-upload from
     /// <see cref="DatSoundCache"/>, identical to a first play.
     /// </summary>
     private void EvictBuffersOverBudget(uint protectedBufferId)