refactor(runtime): extract local teleport and player mode

Move local teleport, player-mode, animation, shadow, and sealed-dungeon lifetimes out of GameWindow. Make player-mode entry transactional and isolate approach completions by controller lifetime and approach generation so stale callbacks cannot affect replacements.

Co-authored-by: Codex <noreply@openai.com>

src/AcDream.App/Physics/EntityPhysicsHost.cs

@@ -193,6 +193,36 @@ public sealed class EntityPhysicsHost : IPhysicsObjHost
         return existing;
     }
 
+    /// <summary>
+    /// Validates an exact incarnation and returns the manager-stable host that
+    /// a later <see cref="InstallOrRebind"/> will publish, without changing any
+    /// live delegates. Player-mode construction uses this preparation edge so
+    /// DAT/physics/camera failures cannot expose a half-rebound host.
+    /// </summary>
+    internal static EntityPhysicsHost SelectStableHostWithoutRebind(
+        LiveEntityRuntime runtime,
+        LiveEntityRecord expectedRecord,
+        EntityPhysicsHost configuration)
+    {
+        ArgumentNullException.ThrowIfNull(runtime);
+        ArgumentNullException.ThrowIfNull(expectedRecord);
+        ArgumentNullException.ThrowIfNull(configuration);
+        if (!runtime.TryGetRecord(expectedRecord.ServerGuid, out LiveEntityRecord current)
+            || !ReferenceEquals(current, expectedRecord))
+        {
+            throw new InvalidOperationException(
+                $"Live entity 0x{expectedRecord.ServerGuid:X8} changed incarnation during physics-host preparation.");
+        }
+
+        return current.PhysicsHost switch
+        {
+            null => configuration,
+            EntityPhysicsHost existing => existing,
+            _ => throw new InvalidOperationException(
+                $"Live entity 0x{expectedRecord.ServerGuid:X8} owns an incompatible physics-host implementation."),
+        };
+    }
+
     /// <summary>
     /// Builds the position-only CPhysicsObj facade used before an animated or
     /// player movement owner exists. The delegates capture the exact live