the spell owns its state, and a malformed file is refused, not a crash

- the spell owns its lifecycle state: the in-flight cast, the local cancel, the cooldowns and the spell-modifier tables live in one module (2328)
- a malformed MPQ, DBC, M2 or WDT file is refused instead of crashing the client, nine read sites bounded
- a test that needs the install or the addon corpus fails instead of skipping when the data is there; the Bagnon render suite runs again (2329)
- the dev crash injector is armed on every platform, and no instrument writes a path relative to the working directory

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

crates/benilla-protocol/src/messages/update_object/movement.rs

@@ -217,7 +217,7 @@ impl MovementBlock {
                 // The dictated final facing, in vmangos's own angle → target → point order
                 // (`packet_builder.cpp:162-167`). Parsed for alignment only: a unit still riding a
                 // path faces its travel tangent every frame, exactly as `MonsterMove`'s facing snap is
-                // overwritten while a path runs (`net::apply::objects::monster_move`).
+                // overwritten while a path runs (`net::objects::monster_move`).
                 if spline_flags & SPLINE_FLAG_FINAL_ANGLE != 0 {
                     let _ = read_f32_le(r)?;
                 } else if spline_flags & SPLINE_FLAG_FINAL_TARGET != 0 {