Harden recruit command authority

[kaiserproger]

Summary

• Adds a server-side command intent model, dispatcher seam, bounded command log, and authority helper.
• Rewires movement, face, attack, strategic-fire, aggro, mount/listen, and GUI recruit commands through server-resolved owned targets instead of trusting client UUIDs.
• Guards group and leader assignment mutations with sender/group ownership checks while preserving new group creation and listen re-enable behavior.

Verification

• source ~/.sdkman/bin/sdkman-init.sh && ./gradlew compileJava
• code-simplifier cleanup pass completed.
• code-reviewer findings resolved: group creation preserved, listen=false recovery preserved, apply-no-group handles non-listening owned recruits.

Notes

• This replaces the smaller command-intent-only PR with a fuller command-pipeline authority slice.