vgsp: eng51 - emit the SPH-BIND stage block (budget fix), admit RT0-bearing draw-synth windows, preserve the last beef push, and default the DS stage-image A/B safe

- gsp_phys_booter.c: the synthesized SPH-BIND stage-block guard
  double-counted the already-emitted raster words (101 > 96), silently
  skipping j0/j2/j4/j5; pre=29 -> pre=84 and the DS stage VAs populate.
  Add the SPH-BIND-STAGE-SKIP receipt.
- gsp_sema_service.c: sema_gl_win_rt0_admit (default 1) admits a beef
  draw-synth window whose FIRST colour-target write is a usable
  surface-class bind (RT0-FIRST-MISS witness); preserve the most recent
  beef push (>=256 B) for the gsp-phys-last-push debugfs dump; skip the
  non-RAM windows in the linear ring scan; fix the MME shadow-RAM index
  shift to (mthd >> 2) & 0xfff.
- gsp_phys_booter.c: sema_gl_sph_vtg600 (default 0) and
  sema_gl_sph_vtg_j1 (default 0) are the stage-image A/B: binding
  family+0x600 poisons the DS (the engine-visible alias shadow there is
  the client's SASS upload), so keep the historical +0x900 zero page
  until a real VTG SPH is authored at an engine-visible VA.
- tools/guest-diag/params-r1624.txt: enable sema_gl_win_rt0_admit.
- wiki/Project-Status.md: 2026-11-15 status (MME chain completes and
  executes DRAW_IAB; DS stage image is the named gate).

0 files changed, 0 insertions, 0 deletions