Add verified live recruiting SDK operations

[eric-levinson]

What changed

• Promotes direct authority only for the six Brooks-verified live recruiting table identities and exact record sizes.
• Adds a typed SDK service for reading recruiting state, changing contact actions and assigned hours atomically, setting NIL offers, and rewriting existing pitches and visits.
• Enforces existing-row-only writes, guarded transactions, dry-run/no-op behavior, strict validation, sanitized errors, and no allocation.
• Documents the verified evidence, exclusions, consumer wiring, design, and implementation plan.

Why

Brooks's live-action mapping provides enough verified runtime evidence to expose a small, safe recruiting mutation surface without relying on raw memory details or speculative allocation behavior.

Impact

Consumers can wire supported live recruiting operations through a typed interface. Unsupported actions, insufficient hours, stale generations, unverified tables, and malformed data fail closed. This does not generate or allocate recruits and does not require in-game testing for this change.

Validation

• npm run check
• npm test — 185 passing
• cfb27_frtk_discovery_smoke
• cfb27_frtk_catalog_smoke
• cfb27_frtk_record_access_smoke
• Added-lines prohibited-evidence scan