vgsp: eng55 - VTG SPH authoring at family+0x900, DDX ring-head tracker decode, MME pack carrier, and the pump atomic-sleep hoist

- gsp_phys_booter.c: sema_gl_sph_vtg_auth (default 1) authors the client's
  live VTG SPH image at family+0x900 and binds VSA/VSB there; new
  SPH-AUTHOR / SPH-ALIAS-auth receipts and a DS-IMAGE stage census at the
  DS latch (stage-start w0 + code word through the pair cache).
- gsp_phys_booter.c: sema_gl_mme_pack_carry (default 0) + _ms (default 100)
  host-initiated windowless continuation carrier for a split MME pack;
  MME-CARRY-ARM/FIRE/COMPLETE/CANCEL/ABORT receipts, beef-only, bounded.
- gsp_sema_service.c: sema_ddx_tracker_auth (default 0) ring-head decode
  for the DDX channel when the USERD is missing/reset (guest-authored
  C36F release applied verbatim); sema_gr_scan_top default raised to
  0x300000000 for the 12 GiB campaign guest.
- gsp_sema_service.c: hoist the r707e VAS candidate verify out of
  svc.chan_lock (its vfio_dma_rw path can sleep) and add in_atomic guards
  to svc_read/svc_write; fixes the gsp-sema-svc "scheduling while atomic"
  pump stall that lost the marked draw-window launch.
- tools: enable sema_ddx_tracker_auth=1 in params-r1624; use timeout -k in
  the guest GL/GZDoom wrappers so a wedged GPU wait cannot hang a cycle.

Validation: c741/c743 boots (VTG author byte readback, cross-lane and beef
pack completion + REARM, DS-IMAGE census) and the c743 DS-FAST chain; A/B
for the carrier and the tracker decode is still open.

0 files changed, 0 insertions, 0 deletions