v0.5.369: short QR shutter and local-only slot recovery

[farzher]

Fix receiver recovery getting trapped in bright/long exposure states and overreacting to one weak QR slot.

• keep automatic/continuous autofocus unchanged
• remember a manual exposure as recovery-good only after a CRC-verified QR decodes under it
• preserve that QR-proven exposure while geometry is being reacquired
• enforce a 5 ms QR shutter ceiling after verified decode; a long manual or AE exposure is converted once to a short shutter, with ISO carrying the exposure product
• use a 4.5 ms deterministic fallback when no prior QR-proven exposure exists
• deduplicate identical exposure/ISO/EV requests so healthy HOLD does not repeatedly wake the camera HAL
• treat slot self-heals as local failures only; they can no longer invalidate the whole lattice
• keep hard geometry reacquisition for whole-wall silence, explicit orientation/pose invalidation, or genuine global geometry collapse
• suppress only the worker restart associated with hard geometry REACQUIRE
• honor the existing AutoOptics toggle; manual/developer exposure ownership is not overridden
• add regressions for 5 ms / ISO 166 recovery, the 5 ms shutter ceiling, and local self-heal behavior
• bump to v0.5.369

This intentionally avoids a rolling-shutter phase model. The receiver uses the simple physical lever first: narrow the temporal integration window and stop local slot failures from destroying valid global state.