guest-diag: global two-pass client-mem candidate order (near offsets across ALL maps first)

The r1398 client-mem sweep failed on a window that parses: with 74
qualifying rw mappings ahead of the nvidiactl mapping holding the MME
0x114 pack, their full per-map sweeps burned 37 808 of the global
8 192-candidate budget before the target map was ever reached, while a
manual _window_accept of that map accepted at idx 1/2/0/3. Near-first
PER MAP is not enough when the budget is global; near-first ACROSS maps
is.

Collect the candidate maps first and run two phases: phase 0 tries the
19 neighbourhood offsets for every map (cheap, not charged against the
budget), phase 1 runs the remaining full sweep under the historical
8192 bound. Content gates unchanged (_window_accept on every candidate
before any pin). k==None/0 (unknown family / family base) keeps its
single bounded full-sweep phase exactly as before.

SESSION 153 r1398; validation on the next cycle (r1399): the strict
client-mem parse of 0x4001004's 60216 B window should now succeed and
re-emit its 15 pins.

0 files changed, 0 insertions, 0 deletions