merge: absorb samwhosung/main on top of the upstream merge

Same fork policy: upstream structure wins, local-unique re-instated.

Cargo.toml unions both measured dev-profile philosophies (codegen-units=1 +
lto=off from samwhosung, debug=line-tables-only + split-debuginfo from the
fork's disk measurements).

glue_booth.rs takes samwhosung's typed GlueScene (token/of_race/from_model_path)
and re-adds the fork's TurtleWoW races (Goblin=9, BloodElf=10) as variants;
their glue fog stays on Human's row, exactly as the fork's scene_fog fallback did.

ui script takes samwhosung's mouseover/hyperlink rework (world_mouseover,
minimap_blip, hyperlink.rs) over the fork's inline hover_link/span_at/pointer
path — the rework covers the same OnHyperlinkEnter/Leave behaviour.

game_plugins.rs keeps the fork's re-measured ceilings (466 / 5,509); mail.rs
keeps the explicit 13-tuple with a float daysLeft; MAP.md takes the superset.

docs/CONTRIBUTING.md

@@ -107,6 +107,9 @@ play`, wraps one command. Without it a clone builds exactly as before; an existi
   - `WOW_UNATTENDED=1` reconnects instead of waiting at a dialog, and exits non-zero on a login
     it cannot pass. `WOW_NOSOUND=1` runs silent. A capture (`WOW_CAPTURE`) is both, and a rig
     (`WOW_RIG`) is unattended. `WOW_ALLOW_ACCOUNT=1` overrides the account guard.
+  - An unattended run starts from defaults in a fresh state folder of its own, printed at boot
+    (`state:`), so it never reads or overwrites your settings, layout or addons. `BENILLA_HOME`
+    pins a folder, for a run that needs addons, seeded files or state kept across runs.
   - On vmangos, `WOW_RIG="tauren druid 60 gear:heal-preraid-bis spec:heal-preraid-bis
 at:ThunderBluff"` finds or creates that character on the account and applies the server's
     premade sets (`WOW_RIG="gear:?"` lists them). `WOW_PROBE_CHAT="<command>"` sends one GM
@@ -115,6 +118,16 @@ at:ThunderBluff"` finds or creates that character on the account and applies the
     `WOW_GOD=off` leaves it off.
   - A trace is `WOW_MOVE_TRACE=<file>`, filtered with `WOW_MOVE_TRACE_TAGS` (`"move,snd,in"`) and
     ended by `WOW_PROBE_EXIT_AT=<seconds>`; grep it for the `rly` and `snd` lines.
+  - To sniff the wire, trace the tags `in` and `out` (`WOW_MOVE_TRACE_TAGS="in,out"`): one line
+    per world packet, with its opcode, name, `len=` and the body as `hex=`, the bytes after the
+    packet header. An `in` line also has `ev=`, the events it decoded to; a server packet that
+    failed to parse is a `skip` line with its bytes. Traces get attached to public issues, so two
+    kinds of body are kept out. A client packet that carries a secret, the auth session, a channel
+    password or any chat text starting with `.` or `!` (a server command), shows
+    `hex=<redacted>` always, and so does a dropped command's log line. Chat in both directions
+    and the bulk name lists (`SMSG_WHO`, the friend, ignore, guild roster and channel lists) show
+    `hex=<withheld>`, with `len=` kept, unless `WOW_MOVE_TRACE_CHAT=1` is set, for a developer who
+    needs those bodies and will read the file before sharing it.
   - A capture runs through `scripts/visual.sh`, whose recipe is the header of
     `crates/benilla-app/src/capture/mod.rs`. Pixel questions go through `benilla-visual crop`,
     `series` and `hotspot`.