feat(playable): 首个 Mac 联网内测版 STB-01 soak 工具与发布状态文档

- 新增 script/playable_soak.sh：先做 soak 配置/资源校验，无 --allow-gameplay
  只校验不启动客户端；N(>=10) 次独立正常退出运行 + 墙钟 soak，失败即停止后续
  运行并记 BLOCKED；写本批次 release-manifest.json 后聚合
- run_client_gate.sh：确认的故障代理对所有 suite 启动（共享场景的退出运行也经代理）；
  soak 超时下限只约束 soak 客户端（validate_soak 增加 soak_client 参数）
- 新增本地 127.0.0.1 故障代理、RSS 采样/内存判定、窗口/指标/流程模块及其测试
- forest_mob_render_test 输出 PASS/FAIL 标记，供 rendering_batch_test.sh 识别
- 新增 docs/FIRST-MAC-PLAYABLE-STATUS.md：如实记录 PASS/BLOCKED、已知问题与环境需求
- .gitignore 排除本地场景配置、凭据文件与运行输出

离线回归：rendering_batch_test.sh failures=0，playable_gate_test.sh PASS，
node 夹具测试 PASS。未联网运行，未重建候选包。

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ft3kXpNdLbKEfg5uDLfqVF

script/playable_build_info.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# Print the candidate package identity as JSON (engine/extension/pck sha256 +
+# architectures). Shared by run_client_gate.sh and playable_test.sh so the
+# per-run build.json and the release manifest are computed the same way.
+set -euo pipefail
+
+if [ "${1:-}" = "--help" ] || [ "$#" -ne 1 ]; then
+  echo "用法: script/playable_build_info.sh APP" >&2
+  [ "${1:-}" = "--help" ] && exit 0
+  exit 2
+fi
+app="$1"
+engine="$app/Contents/MacOS/mtgodot-poc"
+pck="$app/Contents/Resources/mtgodot-poc.pck"
+dylib="$(find "$app/Contents/Frameworks" -maxdepth 1 -type f -name '*.dylib' 2>/dev/null | LC_ALL=C sort | head -n 1)"
+
+sha256_of() {
+  if [ -n "$1" ] && [ -f "$1" ]; then shasum -a 256 "$1" | awk '{print $1}'; else printf ''; fi
+}
+archs=""
+if [ -f "$engine" ]; then archs="$(lipo -archs "$engine" 2>/dev/null | tr ' ' '+' || true)"; fi
+
+node -e '
+const [engine, extension, pck, arch] = process.argv.slice(1);
+process.stdout.write(JSON.stringify({ engine_sha256: engine, extension_sha256: extension, pck_sha256: pck, arch }) + "\n");
+' "$(sha256_of "$engine")" "$(sha256_of "$dylib")" "$(sha256_of "$pck")" "$archs"