CLAUDE: item-4 step-4 native - carved-render bind API (tp_create_module2 + tp_proc_render_bind_source)

- tp_create_module2(srcdir, devrt, green_spec): explicit carve spec for the
  Java/JNA path (TP_GREEN_SM env entry unchanged; shared impl).
- tp_proc_render_bind_source(render_proc, src_proc): a render-ONLY TpProc in
  its own (carved) module bound to the pose proc - reads the source's image
  ring/gc/rbr/kernels + ready events cross-context; only render-private
  buffers live in the carve (no second CLT/kernel set). Ring-reuse guard
  bridged via r_client; destroy unlinks both ways.
- render_setup: lazily build the reverse-distortion table on the resolved
  source. FIXES a latent harness bug: a render-only proc never built rByRDist,
  so carve_combo's solo render reference (step 3) was geometry-garbage but
  self-consistent - caught by the new bind gates disagreeing.
- test_carve_combo_jna: b0-b4 bind arrangements (bound solo/combo bit-exact,
  PLAIN-pose + carved-render production mirror proves plain<->green same-
  device VA sharing, staged-upload race through the guard bridge + cross-ctx
  event wait). Module creation switched to tp_create_module2.
- Gates: carve_combo ALL PASS (a0-a3 + b0-b4, pose bit-identical everywhere,
  render outputs bit-exact); full run_cases suite ALL PASS; sanitizer(12.8)
  0 errors.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>