test(release): require rendered VobSub evidence

[ruizkinio]

Summary

• require three time-windowed VobSub render captures per physical device
• validate canonical RGB-only PNG structure, CRCs, decoded bounds, exact immutable paths, hashes, and explicit visual/privacy attestations
• reject reuse across all six phone/TV captures and show pending captures in recorder status
• document the publication-safe capture workflow

Validation

• root release suite: 54/54 passed
• git diff --check passed
• two independent review passes addressed all findings