ci(track-a): audit auth session dispatch binding

[blakinio]

Terminal audit disposition — consumed by promotion #569

Status: CLOSED UNMERGED AS AUDIT-ONLY / CONSUMED.

This PR was a temporary coordinator-owned GitHub-hosted discriminator for source Draft #556. Its strict final result is:

audit head 4d377f8088e07e68f3680558212f16e532201f70
strict run 32239540646 = SUCCESS
artifact 9360231314
artifact SHA256 f81ab45076a2f31d7fa9bfc34793009a1a52347e4dd26ad6ce73225e274d12b7
COORD_STRICT_CONTROL_FLOW_BINDING=PASS

The strict audit independently re-fetched the exact current package and proved the complete QMeta invoke switch chain, confirming:

• TGameClient::onRequestLoginWithCredentials index 17 / METHOD -> 0xd196f0;
• TGameClient::connectClientToGameserverWithExistingCredentials index 11 / METHOD -> 0xd19500;
• TLoginRequestUploader::loginSuccessful index 0 / SIGNAL -> signal activation dispatch target 0xd10200;
• TCharacterSelectionController::requestCharacterLogin index 0 / SIGNAL -> signal activation dispatch target 0xd52050.

The temporary diagnostic workflow was retired before this terminal disposition. Canonical sanitized audit plan, source-log cross-check, source-head validation, strict result and corrected source evidence are carried by promotion PR #569; therefore no workflow from this audit PR should merge to main.

No official-client execution, login, credentials, process-memory access, GUI input, gameplay or physical runtime operation occurred.