Sync Goons, Facial Artwork, and Batshit Guide

[SirBadfish]

Summary

• sync the public-safe advanced Goon appearance, body-dial, eye-contact, performance-rig, camera, and scene-control work from the preceding batch
• ship Facial Artwork v3 and Eye Appearance v1 with calibrated brow/iris/pupil scale, intuitive artwork movement, per-Goon convergence, and the restructured Body Appearance / Face Appearance editor
• convert the retired Batshit Guide clip into the built-in and portable Batshit Guide skill, with UserDocs-backed references and a CI-enforced sync utility
• keep the public artwork-validator tests self-contained by generating valid PNG fixtures from public masks instead of reading private dev evidence
• refresh related tests, packaged assets, UserDocs, Batshit Agent Docs, and Portable Skills

Why

The public repo had fallen behind the accepted private product state, and the prior PR exposed two boundary failures: it lacked the later clip-URL regression fix, and one public server test depended on an intentionally excluded _private/ PNG. This update exports the current public-safe tree and removes that private test dependency at its root.

Validation

• public export: 2,797 files copied, 1,092 private files excluded, 0 review items, 0 content findings
• export Gitleaks scan: no leaks
• direct private-path and private-repo-reference scans: passed
• Docker launcher syntax and Compose configuration: passed
• UserDocs-to-Batshit-Guide and Portable Skills sync checks: passed
• exported app svelte-check: passed with 0 errors and 0 warnings
• exported app focused/previous-failure suite: 16 files, 132 tests passed
• exported batshit-server suite: 7 files, 63 tests passed
• private chapter validation: 14 app files / 108 tests, complete Goon Python suite / 85 tests, and ReleaseSafe Mac package audit passed

No dependency manifests changed in this refresh, so the prior public dependency-root audit remains applicable. This stays a draft public sync PR until protected CI and CodeQL finish.