Merge latest CCTV foundations and retain reviewed follow-up fixes

docs/CURRENT-STATE.md

@@ -4464,6 +4464,11 @@ silently demoting every later lookup for the session.
   Tarktee owns both XML requests with one 30-second deadline and shared abort;
   a failed header or body read cancels its sibling, including a response arriving
   after cleanup.
+  Both Tarktee XML catalogs refuse redirects and have a 4 MiB per-document
+  limit, enforced against declared length and streamed bytes. A rejected fetch,
+  unsuccessful response, or body-read failure releases both available response
+  bodies; read failures also cancel an active sibling reader. Cameras sharing
+  an image number are deduplicated before the Tarktee pack cap is applied.
 - **CCTV v3 UX — viewshed + calibration gizmo** (built 2026-07-05 and field
   validated 2026-07-21): the COVERAGE toggle is a
   tri-state cycle `OFF → ON → VIEWSHED`; viewshed mode renders each visible camera's frustum