Fix the review findings across the engines, layers, data and QA

Navara now matches Cesium where the review found it diverging: a flight
holds the camera inputs, camera.changed counts turns as Cesium does,
render requests made during a frame survive it, follow pinches zoom,
ground widths follow the pixel ratio and Cyber sonar reaches glyph caches
and models. On Cesium, a staged imagery swap keeps loading tiles, setView
replaces a running flight, and a cleared weather detail goes away.

The contract gains MoverSet.failed, maps.terrainRevision,
render.maxTextureSize and surface.sampleTerrainMostDetailed on every
engine, so layers retry failed models, key road heights by terrain,
size weather textures to the GPU and place Bhote Koshi cards on detailed
terrain.

Engine switches keep the live view, follows, focus, layer options and
cards: a pick hands over the exact pose, applies no address options and
pans no carried-over card; a history visit still applies its entry.

Layers put GhostMaps pins, cable landings, OSM Places and directions on
the measured surface without per-frame sampling, draw the Cockpit contact
dot, hide disabled CCTV on attach, and keep ALPR running outside secure
contexts. KML imports draw raised polygon fills, rotated and coloured
ground overlays and north-referenced icon headings, and report files
with nothing to draw.

QA scripts read the contract instead of Cesium internals (test:track is
109/109 again), wait for the camera to rest before clicking, and give
cold switches and parked engines realistic time. Docs follow the code.

scripts/qa-navara-geo-import.mjs

@@ -2,8 +2,8 @@
 // UTILITIES ▸ Import on Navara under the strict network policy: GeoJSON,
 // KML, KMZ (a packed icon and a ground overlay) and GPX through the real
 // file input, each one row; Navara draws their shapes in the row colour and
-// their pins, counts what it cannot draw (the KMZ ground overlay) and says
-// so in the hint; hide, fly-to and remove work on the engine; the files
+// their pins and packed ground overlay; unsupported content is counted
+// in the hint; hide, fly-to and remove work on the engine; the files
 // survive a switch to Cesium and back and draw on each engine. No file makes
 // the page request anything it names (the strict policy fails any request
 // outside the preview and the free tile cache).
@@ -152,7 +152,9 @@ await strict.run(
         (k) =>
           window.__godsEyeView?.engine?.kind === k &&
           window.__gevGeoImport?.diagnostics().attached &&
-          !document.querySelector('#globe-engine')?.disabled &&
+          !document.querySelector(
+            '#globe-engine:is([disabled], [aria-busy="true"])',
+          ) &&
           !document.querySelector('.engine-switch-frame') &&
           document.querySelector('#loading-screen.hidden'),
         { timeout: 120000 },
@@ -171,7 +173,7 @@ await strict.run(
         rows: document.querySelectorAll('#geo-import-list .geo-import-row')
           .length,
         hint: document.getElementById('geo-import-hint')?.textContent || '',
-        // Navara draws the pins as mover sets; Cesium as entities (none).
+        // Both engines draw imported pins through mover sets.
         pins: window.__godsEyeView.engine.movers
           .list()
           .filter(({ id }) => id.startsWith('geo-import-'))