feat(video+desktop): camera capture, video UI, E2E AEAD wiring, test fixes

Blockers 4 & 5: browser getUserMedia → JPEG IPC → Rust I420 pipeline;
remote video strip renders decoded frames via canvas; EncryptingTransport
wraps QuinnTransport so WZP AEAD is applied to all media (C2 fix).

Test fixes: HandshakeResult.session destructuring across relay/client/crypto
integration tests; video_codecs field added to all CallOffer/CallAnswer
structs; wzp-video pipeline_roundtrip integration tests added.

PRD docs: five Kimi-ready specs for E2E encryption, Android NDK 0.9 migration,
quality upgrade flow, wire-format hardening, and clippy debt.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

crates/wzp-android/src/engine.rs

@@ -538,6 +538,7 @@ async fn run_call(
         alias: alias.map(|s| s.to_string()),
         protocol_version: 2,
         supported_versions: vec![2],
+        video_codecs: vec![],
     };
     transport.send_signal(&offer).await?;
     info!("CallOffer sent, waiting for CallAnswer...");
@@ -948,8 +949,8 @@ async fn run_call(
                     }
 
                     let is_repair = pkt.header.is_repair();
-                    let pkt_block = pkt.header.fec_block as u8;
-                    let pkt_symbol = pkt.header.fec_block >> 8;
+                    let pkt_block = pkt.header.fec_block;
+                    let pkt_symbol = (pkt.header.fec_block >> 8) as u16;
                     let pkt_is_opus = pkt.header.codec_id.is_opus();
 
                     // Phase 2: Opus packets bypass RaptorQ entirely — DRED

crates/wzp-android/src/pipeline.rs

@@ -137,7 +137,7 @@ impl Pipeline {
         if header.fec_block != 0 {
             let is_repair = header.is_repair();
             if let Err(e) = self.fec_decoder.add_symbol(
-                header.fec_block as u8,
+                header.fec_block,
                 header.fec_block >> 8,
                 is_repair,
                 &packet.payload,