feat: presence windows come from registry claims (schema_version 2)

The sink no longer reconstructs presence from per-frame detections. A reaped
track already IS a window — [first_seen, last_seen] of a track an actor owned —
so it is pushed straight to the aggregator when it dies and written out as-is.

AR-012 completed end to end. The annealing pass is deleted, not disabled:
anneal_sec existed only to bridge gaps between isolated accepted frames, and a
track that survives its own gaps leaves it nothing to do. The field is REMOVED
from the output rather than zeroed — a field naming a mechanism the pipeline no
longer has is actively misleading to anyone reading a manifest, and would
outlive everyone who remembers why it reads 0.

IR-002 — schema_version 2, matching jRay/SPEC.md JR-002. Windows become objects
carrying `belief` and `route` rather than bare float pairs, so a consumer can
caveat or filter instead of treating every window as equally certain. The new
`extraction` block carries `extinction_sec` (the successor to anneal_sec, and
what a consumer actually needs to interpret a window) and `gallery_scope` —
global vs limited being the strongest single quality signal when two manifests
compete for one cut, since identical gallery_size can mean very different
recall.

AR-016 wired: a pre-write hook flushes the registry with the last timestamp
seen, so tracks still live at EOF are emitted. A film ends with faces on screen
and those tracks have not timed out; without this the closing scene's cast is
silently dropped, which reads as a recognition miss rather than a bookkeeping
bug.

IR-003 stays In Progress deliberately: the sink now writes after the flush, but
the deferred re-identification pass (AR-020) does not exist yet, so output is
still final at EOF rather than after it.

This is a BREAKING format change and part of the coordinated SR-003 bump — it
must ship together with the jRay reader and the server's acceptance of the new
shape, not ahead of them.

Suite: 80 cases, 3250 assertions.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

TRACES: AR-012, AR-016, IR-002, IR-003 | SR-002, SR-003

src/main.cpp

@@ -208,9 +208,20 @@ int main(int argc, char** argv) {
 
     matcher_fn.set_registry(registry);
 
+
     FaceTrackerFunc                   ftracker_fn{cfg, registry, same_person};
     SceneTrackerFunc                  tracker_fn {cfg};
     ResultSinkFunc                    sink_fn    {cfg, done};
+
+    /// TRACES: AR-012, AR-016, IR-002, IR-003 | SR-002
+    // A reaped track goes straight to the aggregator, so the registry holds only
+    // live tracks and its size is bounded by concurrent on-screen faces rather
+    // than growing with the film.
+    registry->on_track_dead([&sink_fn](const DeadTrack& d) { sink_fn.add_claim(d); });
+    // AR-016: a film ends with faces on screen and those tracks have not timed
+    // out. Without this flush the closing scene's cast is silently never
+    // emitted — a loss that reads as a recognition miss, not a bookkeeping bug.
+    sink_fn.set_pre_write_hook([registry](double last_ts) { registry->flush(last_ts); });
 #ifdef SAE_DEBUG
     DebugRendererFunc   debug_fn   {cfg};
 #endif