feat(core): port App/Surface and wire up the runnable ghostty binary

This is the integration step that turns the ported crates into a working
terminal: `cargo run` now opens a GTK window running the user's shell.

ghostty-core ports App.zig, Surface.zig (split into keyboard, mouse,
binding, clipboard and config submodules), surface_mouse.zig and
global.zig, and implements the runtime traits. perform_binding_action
handles every binding action.

Cross-crate integration:
- The core<->runtime traits (CoreApp, CoreSurface, RtApp, RtSurface,
  Waker) move from apprt-gtk into ghostty_apprt::runtime_api so the core
  stays runtime-agnostic; Scrollbar/RendererHealth stand-ins are replaced
  by the real terminal/renderer types.
- termio now uses ghostty_renderer::state::{State, SharedState}; the
  renderer calls kitty_update; image-storage-limit is applied at init
  and on config change.
- The search thread locks the terminal through a TerminalLock trait so
  it can share the render state mutex; termio's Wakeup gained a hook to
  wake the renderer thread.
- apprt-gtk: GL proc addresses are resolved through libepoxy's
  epoxy_glFoo pointer variables (plain glFoo symbols resolved to null),
  default DPI fixed to 96, libadwaita version read without GTK init so
  --version works headless.

The root binary dispatches +actions to ghostty-cli (list-fonts,
show-face and new-window are now wired) and otherwise runs the GTK app
with the real core.

Verified at runtime on Wayland and X11: shell prompt and colored output
render, child exit closes the window cleanly. Not yet verified: keyboard
and mouse input, clipboard, IME, tabs and splits (no key injection was
possible in this environment). GHOSTTY_DEBUG_SCREENSHOT=<png> dumps the
renderer's last frame for headless checks.

Test Plan:
- cargo test --workspace (2890 passed)
- cargo clippy --workspace --all-targets -- -D warnings
- GSETTINGS_BACKEND=memory GHOSTTY_RESOURCES_DIR=/usr/share/ghostty \
  cargo run

crates/ghostty-apprt-gtk/src/adw_version.rs

@@ -6,12 +6,20 @@ use crate::gtk_version::Version;
 pub const COMPTIME_VERSION: Version = (1, 5, 0);
 
 /// Returns the runtime libadwaita version.
+#[allow(unsafe_code)]
 pub fn get_runtime_version() -> Version {
-    (
-        adw::major_version(),
-        adw::minor_version(),
-        adw::micro_version(),
-    )
+    // The safe `adw::major_version()` etc. assert that libadwaita was
+    // initialized, but the C functions don't need it (and `+version` has no
+    // display to initialize GTK with).
+    // SAFETY: these functions only return compile-time constants of the
+    // loaded library and have no preconditions.
+    unsafe {
+        (
+            adw::ffi::adw_get_major_version(),
+            adw::ffi::adw_get_minor_version(),
+            adw::ffi::adw_get_micro_version(),
+        )
+    }
 }
 
 /// Logs the build and runtime libadwaita version.