feat(peer): add transactional local game operations

Implement the peer-owned state model from PLAN.md. A root-level version.ini
is now the download completion sentinel, local/ as a directory is the install
predicate, and exact root-level version.ini detection prevents nested files
from becoming sentinels by accident.

Add the peer operation table that gates downloads, installs, updates, and
uninstalls by game ID. Serving paths now reject non-catalog games, active
operations, missing sentinels, and any request that points under local/.
Remote aggregation treats LocalOnly peers as non-downloadable so they do not
contribute peer counts, candidate source selection, or latest-version checks.

Move install-side filesystem mutation into lanspread-peer::install. The new
module writes atomic .lanspread.json intents, uses .local.installing and
.local.backup with .lanspread_owned markers, and performs startup recovery
from recorded intent plus filesystem state. Downloads now buffer version.ini
chunks in memory and commit the sentinel last through .version.ini.tmp.

Replace the fixed 15-second monitor with notify-backed non-recursive watches,
per-ID rescan gating, and a 300-second fallback scan. The optimized rescan
path updates one cached library-index entry and active operation IDs preserve
their previous summary during scans.

Test Plan:
- just fmt
- just clippy
- just test
- just build

Refs: PLAN.md

crates/lanspread-peer/src/startup.rs

@@ -22,6 +22,7 @@ use crate::{
     PeerCommand,
     PeerEvent,
     PeerRuntimeComponent,
+    Unpacker,
     context::Ctx,
     events,
     network::send_goodbye,
@@ -73,6 +74,7 @@ pub(crate) enum SupervisionPolicy {
     BestEffort,
 }
 
+#[allow(clippy::too_many_arguments, clippy::implicit_hasher)]
 pub(crate) fn spawn_peer_runtime(
     tx_control: UnboundedSender<PeerCommand>,
     rx_control: UnboundedReceiver<PeerCommand>,
@@ -80,6 +82,8 @@ pub(crate) fn spawn_peer_runtime(
     peer_game_db: Arc<RwLock<PeerGameDB>>,
     peer_id: String,
     game_dir: PathBuf,
+    unpacker: Arc<dyn Unpacker>,
+    catalog: Arc<RwLock<std::collections::HashSet<String>>>,
 ) -> PeerRuntimeHandle {
     let shutdown = CancellationToken::new();
     let task_tracker = TaskTracker::new();
@@ -94,8 +98,10 @@ pub(crate) fn spawn_peer_runtime(
             peer_game_db,
             peer_id,
             game_dir,
+            unpacker,
             runtime_shutdown.clone(),
             runtime_tracker.clone(),
+            catalog,
         )
         .await
         {
@@ -182,7 +188,7 @@ fn spawn_peer_discovery_service(ctx: &Ctx, tx_notify_ui: &UnboundedSender<PeerEv
 fn spawn_peer_liveness_service(ctx: &Ctx, tx_notify_ui: &UnboundedSender<PeerEvent>) {
     let tx_notify_ui = tx_notify_ui.clone();
     let peer_game_db = ctx.peer_game_db.clone();
-    let downloading_games = ctx.downloading_games.clone();
+    let active_operations = ctx.active_operations.clone();
     let active_downloads = ctx.active_downloads.clone();
     let shutdown = ctx.shutdown.clone();
     let task_tracker = ctx.task_tracker.clone();
@@ -199,7 +205,7 @@ fn spawn_peer_liveness_service(ctx: &Ctx, tx_notify_ui: &UnboundedSender<PeerEve
         move || {
             let tx_notify_ui = tx_notify_ui.clone();
             let peer_game_db = peer_game_db.clone();
-            let downloading_games = downloading_games.clone();
+            let active_operations = active_operations.clone();
             let active_downloads = active_downloads.clone();
             let shutdown = shutdown.clone();
             let task_tracker = task_tracker.clone();
@@ -207,7 +213,7 @@ fn spawn_peer_liveness_service(ctx: &Ctx, tx_notify_ui: &UnboundedSender<PeerEve
                 run_ping_service(
                     tx_notify_ui,
                     peer_game_db,
-                    downloading_games,
+                    active_operations,
                     active_downloads,
                     shutdown,
                     task_tracker,