fix(headless): FA6 — name-match the Recruit bot instead of nearest-any-player

The second live gate run exposed a real environmental hazard: this shared
ACE dev instance has a THIRD player character online (+Je, guid
0x50000001), and after @teleallto it ended up nearer to the Leader bot than
the actual Recruit bot (+Horan, 0x5000000B). RuntimeFriendlyTargetQuery.
FindClosestOtherPlayer — "nearest ANY other player" — picked +Je, and the
fellowship recruit sent to it obviously never completed (confirmed live:
WaitRecruited/WaitForRecruit both timed out, both bots quarantined and
gracefully logged out cleanly).

RuntimeFriendlyTargetQuery.FindPlayerByName resolves the nearest player
whose streamed name matches exactly, with 3 new conformance tests
(preferring the named player over a closer stranger, returning null when
absent, and case-sensitivity/hidden/no-draw/self rejection).

FellowshipAllegianceGateCoordinator (AcDream.Headless.Policies) is a small
same-process, no-locking (single update thread) carrier for the Recruit
bot's own discovered character name — set by its own HeadlessSessionHost
the instant CharacterList selection resolves it, which IS D8's "discover it
live" mechanism, not a hard-coded value. Constructed once per
HeadlessProcessHost and threaded through HeadlessBotPolicyFactory.Create
into the Leader policy, which now name-matches instead of taking whichever
player entity happens to be closest.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/AcDream.Headless/Hosting/HeadlessProcessHost.cs

@@ -2,6 +2,7 @@ using AcDream.Headless.Configuration;
 using AcDream.Headless.Credentials;
 using AcDream.Headless.Diagnostics;
 using AcDream.Headless.Platform;
+using AcDream.Headless.Policies;
 using AcDream.Runtime;
 using AcDream.Runtime.Session;
 
@@ -57,6 +58,10 @@ internal sealed class HeadlessProcessHost : IDisposable
             configuration.Sessions.Count);
         HeadlessProcessContentOwner? content = null;
         HeadlessProcessResourceSampler? resources = null;
+        // FA6: constructed unconditionally — cheap, and every non-gate
+        // session simply never reads or writes it (see the coordinator's
+        // own class doc).
+        var gateCoordinator = new FellowshipAllegianceGateCoordinator();
         try
         {
             if (configuration.Process?.Content is { } contentDescriptor)
@@ -98,7 +103,8 @@ internal sealed class HeadlessProcessHost : IDisposable
                         _diagnostics,
                         sessionOperations,
                         timeProvider,
-                        contentLease: contentLease));
+                        contentLease: contentLease,
+                        gateCoordinator: gateCoordinator));
                 }
                 catch
                 {