Merge origin/main into german/navara

Main's camera, voice, Cockpit and layer work now runs on the globe
contract where this branch draws through it:

- The voice tilt to an angle, its pivot about the place under the
  crosshair and the frame limit from orbit run through the camera rig;
  src/globeInView.js measures a camera pose with src/geo instead of a
  Cesium camera. The free-look height limit and the globe-in-view
  recovery stay Cesium-only for now.
- Cockpit takes main's own-layer entry rule. Double-clicking the
  followed track goes through cockpitHost.routeDoubleClick, so it works
  on both engines.
- Space Missions' failed-entry rollback and GhostMaps' age filter run
  in the engine-neutral layer code. On Cesium an expired report is
  dropped in place; on Navara its product is redrawn.
- Wildlife Sightings joins the catalog Cesium-only: Navara leaves it
  out, and the shell builds its card only for the real layer, so a
  Navara page no longer fails to start on its stand-in.
- One instruction sentence is shorter, which keeps the Realtime prompt
  within its 55,500-character budget with the Sentinel-2 basemap.

changelog.d/1555-navara-globe-engine.md

@@ -3,8 +3,9 @@
   `?engine=navara`. Navara draws at CSS pixels like Cesium; Navara HD
   (`?engine=navara-hd`) draws at the screen's full resolution and needs about
   1 GiB more on a Retina screen. Layers keep their data across a switch and
-  draw on both engines; Cesium loads only when a Cesium globe or a Cesium-only
-  feature needs it (German, @gekh, #1555).
+  draw on both engines, except Wildlife Sightings, which is Cesium-only for
+  now; Cesium loads only when a Cesium globe or a Cesium-only feature needs
+  it (German, @gekh, #1555).
 - Keep the cockpit camera steady near the ground: it no longer jumps up and
   down when an aircraft's reported altitude sits below the globe's terrain,
   on either engine (German, @gekh, #1555).