frames,jar,passes: verifier-driven hardening from real jars

Proven by paranoid runs over lorep (17 classes, fully green),
LoVisual (4081 classes) and oc2r (1278 classes) with per-class
java -Xverify:all, each fix first reproduced as a red test:

- merge: Top absorbs instead of Top-wins (javac declares Top for
  slots unwritten on some inflow; precise types reject those edges).
  Regression: loop_head_keeps_top_for_loop_local.
- emit: collapse [Long|Double, Top] pairs on operand stacks
  (javac writes one entry; the pair is rejected). Regression:
  wide_stack_join_emits_single_entries.
- xfer ArrayLoad: push the wide pair, fixing lcmp underflow.
  Regression: array_load_wide_pushes_pair.
- xfer <init>: convert only the receiver's own allocation site
  instead of every Uninitialized (nested construction clobbered
  the outer object). Regression: nested_construction_keeps_outer.
- xfer ANewArray: array operands gain one dimension ([B] -> [[B)
  instead of an illegal L-wrap ([L[B;). Covered by the same test.
- jar load: duplicate class names (multi-release module-info
  twins) keep the first occurrence instead of crashing save.
  Test: duplicate_class_names_keep_first.
- strings/constants: skip methods past MAX_METHOD_INSNS (8000)
  so giants cannot overflow the 64KB writer ceiling. Tests:
  oversized_methods_are_skipped in both passes.
- merge errors now name both types being merged.

Also: em-dash removed repo-wide (724 spots, rule added to
todo.md), allow-lints only in tests (scratch example deleted),
code comments migrated to English in every file this change
touches.

crates/noxis-classfile/src/format/frames/mod.rs

@@ -2,11 +2,11 @@
 //!
 //! Frames are the most expensive part of any Rust obfuscator: the JVM verifier
 //! (class version ≥ 50) demands an exact `StackMapTable`, or the class won't load.
-//! Implementation options and their costs — `docs/stack.md`.
+//! Implementation options and their costs - `docs/stack.md`.
 //!
 //! Method: CFG over labels → worklist with types (`xfer`) → LUB merge (`merge`)
 //! → emit compact frames (`emit`). Byte offsets come from the same encoding the
-//! writer uses — otherwise frames would drift apart from the bytes.
+//! writer uses - otherwise frames would drift apart from the bytes.
 
 mod emit;
 mod flow;
@@ -113,7 +113,7 @@ pub fn compute_frames(
     emit::emit_frames(&states, &targets, &initial.locals, &merger)
 }
 
-/// The byte offset of each instruction — using the same encoding as the writer.
+/// The byte offset of each instruction - using the same encoding as the writer.
 fn layout(
     bare: &[&Insn],
     labels: &BTreeMap<Label, u32>,
@@ -188,7 +188,7 @@ fn run_worklist(
     Ok(())
 }
 
-/// Merge a state into an instruction; `true` — changed, keep walking.
+/// Merge a state into an instruction; `true` - changed, keep walking.
 fn flow_into(
     merger: &Merger<'_>,
     states: &mut [Option<State>],
@@ -220,7 +220,7 @@ fn flow_into(
 }
 
 /// CFG edges without exceptions: fallthrough + branch targets.
-/// The exception type at a handler's entry (`catch-all` — any throwable).
+/// The exception type at a handler's entry (`catch-all` - any throwable).
 fn catch_type(catch: &Option<String>) -> VerificationType {
     match catch {
         Some(name) => VerificationType::Object(name.clone()),