vgsp: serve word-34..47 section pages from their resolved PAs; seed the pointer pairs (n_data 0->1024)

The final-pixel-wall data window: svc_gr_data_fill discarded a candidate page
that HAD resolved in gr_pages (launch_internal blanket skip: c203 evidence
'page[2] va=0x120400000 pa=0xa00000 ap=2 word=34' + '10 candidate ptrs, 0
pages resolved; 7 dropped' -> GR-DEC n_data=0), and the stream3d lane
(qmd=0x0) never seeded the capture's decoded operand pairs (inline-QMD words
34..47) as candidates. Serve word-34..47 pages from their resolved gr_pages
PA (li_pa, span=1; word 32/48/49 stay excluded as before) and seed the
pointer pairs from a request-carried copy (race-free vs the capture ring).
Live proof c215: 'li cand va=0x120400000 word=34 pa=0xa00000 ap=2' ->
'GR-DEC n_data=1024' (was 0). Residual: the 1524 B first-frame's pointer
pages are not yet resolvable at that instant (n_ptr_req=5 seed_add=0; frames
2+ resolve 1024) - resolver timing, documented.

Also documented (no change): the copy-out refusal for dst=0x120700000 (the
GL client's fixed-CB page) falls through to the forced-seed path and is
benign for pixels; the TRUE px0 blocker is engine-zero-write: every stream3d
launch ends 'NOWRITE-CONFIRMED ... n_data=1024 tracked=1024 wrote=0' +
'NOWRITE-REGS fe_esr=0x80000000 trap=0x8000022c/00000800/00000000' even with
the full RT window (SURF-PRELUDE target=0xa000000) - the engine executes but
stores nothing.

0 files changed, 0 insertions, 0 deletions