frames,jar,passes: verifier-driven hardening from real jars

Proven by paranoid runs over lorep (17 classes, fully green),
LoVisual (4081 classes) and oc2r (1278 classes) with per-class
java -Xverify:all, each fix first reproduced as a red test:

- merge: Top absorbs instead of Top-wins (javac declares Top for
  slots unwritten on some inflow; precise types reject those edges).
  Regression: loop_head_keeps_top_for_loop_local.
- emit: collapse [Long|Double, Top] pairs on operand stacks
  (javac writes one entry; the pair is rejected). Regression:
  wide_stack_join_emits_single_entries.
- xfer ArrayLoad: push the wide pair, fixing lcmp underflow.
  Regression: array_load_wide_pushes_pair.
- xfer <init>: convert only the receiver's own allocation site
  instead of every Uninitialized (nested construction clobbered
  the outer object). Regression: nested_construction_keeps_outer.
- xfer ANewArray: array operands gain one dimension ([B] -> [[B)
  instead of an illegal L-wrap ([L[B;). Covered by the same test.
- jar load: duplicate class names (multi-release module-info
  twins) keep the first occurrence instead of crashing save.
  Test: duplicate_class_names_keep_first.
- strings/constants: skip methods past MAX_METHOD_INSNS (8000)
  so giants cannot overflow the 64KB writer ceiling. Tests:
  oversized_methods_are_skipped in both passes.
- merge errors now name both types being merged.

Also: em-dash removed repo-wide (724 spots, rule added to
todo.md), allow-lints only in tests (scratch example deleted),
code comments migrated to English in every file this change
touches.

crates/noxis-classfile/src/model/mod.rs

@@ -1,4 +1,4 @@
-//! The "program" structure — the unit of work for the pipeline.
+//! The "program" structure - the unit of work for the pipeline.
 
 pub mod builder;
 pub mod version;
@@ -8,7 +8,7 @@ pub use version::Version;
 use crate::format::StackMapFrame;
 use crate::insn::{Const, Insn, Label};
 
-/// Unknown/specific attributes are stored as bytes — lossless round-trip.
+/// Unknown/specific attributes are stored as bytes - lossless round-trip.
 #[derive(Debug, Clone, PartialEq)]
 pub enum Attribute {
     SourceFile(String),
@@ -32,7 +32,7 @@ pub enum Attribute {
         class: String,
         method: Option<(String, String)>,
     },
-    /// `MethodParameters`: formal parameter names (`None` — unnamed).
+    /// `MethodParameters`: formal parameter names (`None` - unnamed).
     MethodParameters(Vec<MethodParameter>),
     /// `Record`: the record class's components.
     Record(Vec<RecordComponent>),
@@ -47,7 +47,7 @@ pub enum Attribute {
 
 #[derive(Debug, Clone, Copy, PartialEq)]
 pub struct LineNumber {
-    /// Start label (the writer computes bytes — survives pass insertions).
+    /// Start label (the writer computes bytes - survives pass insertions).
     pub start: Label,
     pub line: u16,
 }
@@ -159,7 +159,7 @@ impl Code {
 
 #[derive(Debug, Clone, PartialEq)]
 pub struct ExceptionHandler {
-    /// `None` — catch-all (`finally`).
+    /// `None` - catch-all (`finally`).
     pub start: Label,
     pub end: Label,
     pub handler: Label,