refactor(config): parse config values from raw bytes like Zig

Zig parses config values (cli/args.zig, Config.zig field parsers,
config/string.zig) from raw byte slices, and each field type decides
whether it requires UTF-8 (InvalidValue otherwise) or stores bytes. The
port escape-encoded raw bytes into Strings at the line reader and let
fields parse the escaped text, so fields could observe encoding
artifacts; successive audits kept finding such leaks (RV5-RV8).

Field parsers now receive the original bytes: text fields validate UTF-8
where Zig does, byte/path fields store bytes (EncodedOs/OsString). This
resolves all 9 RV8 findings (docs/rewrite/notes/review-rv8-codex.md),
each with a regression test: Windows path conversion fails with
BadPathName instead of substituting U+FFFD; Windows process launch uses
strict UTF-8 like Zig's Command; the WTF-8 decoder accepts paired-
surrogate encodings like Zig; literal U+FDD0 Unicode key triggers;
selection-word-chars and clipboard-codepoint-map reject invalid UTF-8;
font style / codepoint-map family names use original bytes; C title
actions forward bytes; D-Bus new-window/Flatpak conversions match Zig.
Design, sweep and validation: docs/rewrite/notes/final-bytes-refactor.md.

Also moves the bundled iTerm2-Color-Schemes license out of
resources/themes/ so +list-themes no longer lists it as a theme
(output is now byte-identical to Ghostty 1.3.1).

Done by Codex (gpt-6-astra), reviewed and verified by the orchestrator.

Test Plan:
- cargo test --workspace --no-fail-fast (3428 passed, exit 0)
- just check-macos (both), just check-windows, just check-wasm
- +show-config --default --docs, +list-keybinds, +list-actions --docs,
  +list-themes --plain compared with /usr/bin/ghostty

crates/ghostty-core/src/surface/keyboard.rs

@@ -24,6 +24,7 @@ use ghostty_input::{
     key_encode,
 };
 use ghostty_inspector as inspector;
+use ghostty_os::osbytes::EncodedOs;
 use ghostty_terminal::terminal::{MouseEvents, ScrollViewport, Terminal};
 use ghostty_termio::message::Message as IoMessage;
 use ghostty_vt::{modes::Mode, mouse_shape::MouseShape};
@@ -40,7 +41,7 @@ pub enum SetRoot {
     /// The root keybinding set.
     Root,
     /// A named key table.
-    Table(String),
+    Table(EncodedOs),
 }
 
 /// The currently active key sequence: the set it started in plus the
@@ -54,7 +55,7 @@ pub struct SequencePath {
 /// An entry of the key table stack.
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub struct TableEntry {
-    pub name: String,
+    pub name: EncodedOs,
     pub once: bool,
 }
 
@@ -796,12 +797,16 @@ impl Surface {
     /// Activate a key table by name (Zig: `activate_key_table[_once]`).
     /// Returns whether the table was activated.
     #[allow(dead_code, clippy::unnecessary_wraps)] // used by the binding-actions module
-    pub(crate) fn activate_key_table(&self, name: &str, once: bool) -> Result<bool, CoreError> {
+    pub(crate) fn activate_key_table(
+        &self,
+        name: &EncodedOs,
+        once: bool,
+    ) -> Result<bool, CoreError> {
         let cfg = self.cfg();
 
         // Look up the table in our config
         if root_set(&cfg, &SetRoot::Table(name.to_owned())).is_none() {
-            log::debug!("key table not found: {name}");
+            log::debug!("key table not found: {name:?}");
             return Ok(false);
         }
 
@@ -810,14 +815,14 @@ impl Surface {
 
             // If this is the same table as is currently active, then do
             // nothing.
-            if kb.table_stack.last().is_some_and(|t| t.name == name) {
-                log::debug!("ignoring duplicate activate table: {name}");
+            if kb.table_stack.last().is_some_and(|t| &t.name == name) {
+                log::debug!("ignoring duplicate activate table: {name:?}");
                 return Ok(false);
             }
 
             // If we're already at the max, ignore it.
             if kb.table_stack.len() >= MAX_ACTIVE_KEY_TABLES {
-                log::info!("ignoring activate table, max depth reached: {name}");
+                log::info!("ignoring activate table, max depth reached: {name:?}");
                 return Ok(false);
             }
 
@@ -831,7 +836,7 @@ impl Surface {
         // Notify the UI.
         self.perform(RtAction::KeyTable(KeyTable::Activate(name.to_owned())));
 
-        log::debug!("key table activated: {name}");
+        log::debug!("key table activated: {name:?}");
         Ok(true)
     }