Prototype Discovery spice encounters, private tokens and stash rewards

Connect real Basic/Advanced base-faction audit setup to all seven Discovery
Spice Cards and eight physical tokens. Add Great Maker's ordered majority
vote and Fremen reserve ride, destructive Discovery blows, private faction
peeks and Collection inspection/reveal, stash rewards and mandatory saved
card overflow, and revealed nested board locations. Share private legal
choices with human controls and all four AI profiles. Preserve normal gates.

Independent review repairs orphaned worm/vote/ride controls, retargeted
reserve arrivals, actor bindings and incomplete overflow discard receipts.
Harden room-aware admission against unrevealed nested locations. Extend the
backed-up local prototype starter with a Discovery profile; preserve seats.

Still missing: next-turn free entry, five special location benefits and
Ornithopter movement spending. Current prototype playthroughs do not certify
those effects or complete module/expansion compliance.

Verification: npm run check passed 4264 offline tests plus types/lint;
npm run build passed; npm run test:integration passed 40 tests. The single
source-bound broad run took 129358ms / 6782ms / 23918ms respectively.
Report: /home/quintine/.local/share/dune/checkpoints/20260913-discovery-prototype/verification/report.json
Source fingerprint: 4ea7b5209a58c369b0b1f8dc239b5dd2f3302bb759d83c32ba5406e80d8ae154

Two seeded Basic/Advanced games complete with component custody intact.
SQLite races pay stashes once and resume committed discards without replay.
Browser 3RJBH26Y verifies genuine human Fremen setup, a Discovery blow from
one reordered physical card, native private Hiereg visibility, enlarged
card/rules reading and refresh. Room remains paused at spice acceptance.
All 125 opening saved rooms unchanged; 31 added, 156 total. No server restart.

Efficiency: three reused bounded helpers; aggregate counter 60591430 to
61812513 after verification, 1221083 tokens before final Git/push overhead.
47 added offline tests. One stable broad run after focused review fixes;
no calibration or exhaustive optional-module interaction matrix.

docs/EFFICIENCY_PILOT.md

@@ -91,3 +91,16 @@ connects runtime, private controls, AI and SQLite recovery. The battle inspectio
 alternative stays explicitly missing instead of holding the independent trade
 for an exhaustive battle-cleanup design. Final checks, counter endpoint and
 checkpoint scope are recorded in the commit.
+
+The Discovery batch starts at aggregate counter 60,591,430. Three bounded helpers
+cover physical inventory, nested board/admission, and private controls/docs;
+reusing them adds deterministic playthroughs and independent review of the
+owner's encounter/reward integration. New playable functions are Great Maker's
+vote/reserve ride, six Discovery blows, private Collection inspection/reveal,
+and both immediate stash rewards with saved overflow discard. Token custody
+and board destinations prepare the following location/flight batch. Reused
+room-start tooling now selects the Discovery profile. Reviews found and repaired
+lost saved controls, a retargetable arrival and skipped overflow discard before
+the stable broad check. The implementation adds no calibration study or server
+restart. Final aggregate endpoint, source-bound checks and push belong in the
+checkpoint commit; whole-module completion remains unclaimed.