feat(control-center): add hard-disabled Official Tibia adapter prep

[blakinio]

Package D PREP implementation

Implements the runtime-independent preparation contract for OTCLIENT-TIBIA-RE-CONTROL-CENTER-PACKAGE-D-PREP.

Hard boundary

• runtime_access: none
• official_client_access: false
• mutation_authorized: false
• no KasmVNC/Remote Desktop/process/memory/login/credential/canonical-authority operations
• real Package D runtime execution remains outside this PR

Result

• adds OfficialTibiaAdapterContract as a deliberately hard-disabled static boundary;
• covers every current Scenario v1 action family while keeping current Track A read/action grades UNKNOWN;
• FIRST_REAL_SLICE=NO_ACTION_CANDIDATE_READY because this runtime-access-none task cannot promote static evidence into current runtime readiness;
• capabilities advertise neither read nor action support;
• optimistic/cached ONLINE / IN_GAME / MUTATION_ALLOWED / FRESH status cannot admit mutation;
• semantic mapping revalidates Scenario parameters and exact finite EffectBound while exposing no raw key/coordinate/opcode/address/PID/window/display/bridge/credential handle;
• execute() deterministically refuses with OFFICIAL_RUNTIME_NOT_ADMITTED;
• the skeleton intentionally has no external guard, irreversible-boundary, capture, runtime-bridge, process or GUI dispatch surface.

TDD / validation

Red checkpoint b42e1956eae85d3618d26bb6776eaacdce590d0c:

• 122 pre-existing Control Center tests passed;
• only failure was the expected missing official_adapter_contract.py import.

Exact implementation head 86556d290173d311f962c8fe3ae30224fb15cd80:

• TIBIA RE Control Center Package A run 32635227212: SUCCESS;
  • Package A deterministic core job 97183844519: 133/133 tests PASS, including 12 Package D PREP tests, PACKAGE_A_MANDATORY_TESTS=65/65, RUNTIME_ACCESS_NONE=PASS, Ruff PASS and diff-check PASS;
  • Fresh Package A falsification audit job 97183844602: clean hosted runner, PACKAGE_A_CHANGED_PATHS=2_DECLARED_ONLY, PACKAGE_A_FRESH_AUDIT=PASS, MATERIAL_FINDINGS_OPEN=0, RUNTIME_ACCESS_NONE=PASS, dispatch/STOP/privacy/canonical-hash falsification checks PASS;
• general CI run 32635227340: SUCCESS;
• changed paths are exactly:
  • tools/tibia_re_control_center/official_adapter_contract.py
  • tests/tools/tibia_re_control_center/test_package_d_prep.py
• PR review/comment inventory: zero comments/threads at readiness review.

Shared documentation ownership

docs/agents/MODULE_CATALOG.md and docs/agents/CHANGELOG.md are intentionally deferred, not edited here. Fresh ownership revalidation found active Draft PR #23 changes both files. The canonical D-PREP prompt explicitly requires serialize/defer on such overlap rather than taking conflicting ownership. This will be recorded in durable closeout evidence as DEFERRED_EXISTING_OWNER_PR_23.

E2E classification

Repository-only request -> semantic mapping/preflight -> deterministic refusal/no-dispatch path: PASS via the Package D PREP suite.

Physical Official Tibia E2E: NOT_APPLICABLE for PREP because the task explicitly has runtime_access:none and does not authorize real Package D execution.