feat(web): fence dart:ffi behind web stubs so the WASM build compiles (T-438, D-100)

`flutter build web --wasm` had been broken since the tree-sitter/PTY dart:ffi
pivot. Per D-100 (resolving Q-50: keep the web "happy accident" alive), every
native binding now sits behind a `dart.library.ffi` conditional import with a
graceful web stub. Desktop builds are unchanged — no fidelity loss; the web
target degrades (no terminal, native git, or syntax highlighting).

Discriminator is `dart.library.ffi`, not `dart.library.io` — dart2wasm provides
dart:io, so FFI is the only blocker.

Fences:
- PTY: pty_session → pty_backend_io / pty_backend_web (stub throws).
- tree-sitter: pure types → syntax_result.dart; tree_sitter_service is now a
  facade over _ffi/_stub; tree_sitter_boot_io/stub fences TreeSitterLib.init().
- watchdog: watchdog_windows_stub (all -1 sampler).
- claude ABI probe: native_abi_io/stub (was `dart:ffi show Abi`).
- testmode fd-check: fd_check_io/stub.

Also dart2js-safe: the 64-bit FNV literals in session_naming.dart + paths.dart
(the dual JS fallback rejected them) — split into 32-bit halves, dropped a
no-op 64-bit mask. Desktop/wasm hash values unchanged.

CI: added a `web-wasm` job (flutter build web --wasm) so the fence can't rot.
Two FFI-constructing tree-sitter tests import _ffi.dart directly (the analyzer
resolves the conditional facade to the stub branch).

Verified: `flutter build web --wasm` → built; `flutter analyze` clean;
`make test` green. Full Playwright e2e harness wiring is the tracked follow-on.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -49,6 +49,15 @@ heading, and (b) bumping `pubspec.yaml` `version:` in the same commit.
   teardown now awaits the process's real death (SIGTERM, escalating to SIGKILL)
   before clearing the transcript and respawning. A dead pane also now shows the
   CLI's own reason instead of a bare "exited (code 1)". (T-437)
+- **Web/WASM build compiles again.** `flutter build web --wasm` (and the
+  `test-e2e` / `ui-dev` / `ui-smoke` harness) had been broken since the
+  tree-sitter/PTY `dart:ffi` pivot. Every native binding (PTY, tree-sitter, the
+  Lua host, the Windows watchdog, the ABI/fd-inheritance probes) now sits behind
+  a `dart.library.ffi` conditional import with a graceful web stub, and the FNV
+  hash constants are dart2js-safe. A `flutter build web --wasm` compile gate was
+  added to CI so the fence can't silently rot. Desktop builds are unchanged — the
+  web target degrades (no terminal, no native git, no syntax highlighting), it
+  does not compromise desktop fidelity. (T-438, D-100, Q-50)
 
 ## [2.5.0] — 2026-06-14