port: land the play-tested work, and only that

Takes the port branch up to 77320d5e -- the state the human play-tested on
2026-09-02 -- for SOURCE paths only. Not a branch merge: `auto/port-p6-audio`
is 366 commits and 938 files, and most of that must not land.

WHAT COMES IN (76 files, all human-confirmed working):
  * the logo splash animation. 08ed3dd1 found it: `pose_at` ASSIGNED the settle
    instant instead of clamping to it, so the splash never animated at all --
    and the same bug manufactured a passing harness result, because the harness
    photographed t past the settle. Confirmed by play-test: "cannot notice any
    obvious difference from the actual game."
  * gamepad input -- (A)/(B) bound additively (`ui_accept` ships with NO joypad
    binding), stick latched with hysteresis at the game's own 61% digitise
    threshold. This is what made (A), video-skip and Extras work at all.
  * menu navigation and flow, menu audio, the exporter, the authored
    declarations, and 23 verification tools under tools/port/.

WHAT IS DELIBERATELY LEFT ON THE BRANCH:
  * everything after c0ae460a -- the F5/F6 title-timing investigation, whose own
    tip commit calls itself a "hand-off for one-minute human checks". Unchecked
    by definition; it goes through the new review gate like anything else.
  * the OPTIONS menu work of 2026-09-03. Real, probably good, NOT play-tested.
  * the F1 repeat mechanism, which its own commit calls "deliberately inert".

WHAT MUST NOT LAND, AND WHY THE .gitignore CHANGED:
  545 MB of extracted game content was committed on that branch -- 850 sprite,
  audio and transcoded video files under `export-probe/` and `export-probe2/`,
  plus 246 MB of loose .wav and .tsv at the repo root. This repository's own
  rule, in this file, is "never game content".

  The rule was not missing. It was written, and it was tightened on that very
  branch, with a careful comment explaining why BOTH `export/` and `data/base/`
  had to be listed -- while the exporter was writing to a third name that
  nobody had thought to list. Enumerating names is the thing that failed. So
  the ignore rules now describe the SHAPE: any top-level `export*/`, game media
  by extension, and loose capture output at the root. Verified both ways -- it
  catches all four offenders and ignores nothing currently tracked.

Verified: `cargo check --workspace` clean; all nine GDScript files parse in
project context, with a positive control (an injected syntax error is detected,
3 lines) so the clean result means something. `tools/port/check-all` was NOT
run -- it needs the container, the export tree and a display.

.gitignore

@@ -25,10 +25,41 @@ __pycache__/
 # ── The port ────────────────────────────────────────────────────────────────
 # Generated from the user's own disc. This repo stays clean-room: code, schemas,
 # authored mappings and documentation only -- never game content.
+#
+# BOTH names are ignored on purpose. `export/` is what the exporter writes and
+# what `ExportTree.locate()` reads today; `data/base/` is the name MODDING.md
+# gives that same tree. Only one of them existed here, and it was the one
+# nothing writes -- so the live output directory was tracked while MISSION §4
+# said it was ignored. Ignoring both means renaming the tree to match the docs
+# cannot silently start committing the disc.
+/export/
 /data/base/
+#
+# ⚠️ Enumerating names is what FAILED. The two rules above were written --
+# carefully, with the comment above -- while 850 files and 299 MB of extracted
+# sprites, audio and transcoded video sat committed under `export-probe/` and
+# `export-probe2/`, a third name nobody had thought to list. So ignore the
+# SHAPE, not the instances: any top-level directory whose name starts `export`,
+# and game media anywhere it lands.
+/export*/
+*.ogv
+*.ogg
+*.wav
+*.xpr
+*.pak
+# Loose capture output at the repo root -- 246 MB of it arrived this way.
+/*.tsv
+/*.log
 # Transient inter-agent files. Deliberately outside history: they are working
 # artefacts with provenance in their manifest, not results.
 /exchange/
 !/exchange/.gitkeep
 .godot/
 port/.godot/
+
+# A mod is usually an EDITED GAME ASSET, and this repository never holds game
+# assets. `data/mods/` is the user's own directory -- the exporter never touches
+# it and neither does git, except for the README that explains the rule.
+/data/mods/*
+!/data/mods/README.md
+!/data/mods/.gitkeep