Own startup input deadlines and private transport capture

[relh]

Startup configuration GETs previously used an unbounded Curly call before games installed signal handling. Cancellation could not join the reader or retain partial configuration bytes before private sealing.

Require an InputReader for runtime config and URI reads. The native reader uses one caller-owned monotonic deadline and cancellation token, captures received bytes before validation, bounds headers/body, rejects redirects, and joins its libcurl handle before returning. Artifact finalization keeps its separate cleanup deadline. Local URI decoding performs no transport; replay bytes remain binary.

Validation on Titan, Nim 2.2.4, Nice19, finite CPU-only units:

• Runtime/file tests; 13 actual HTTP cases; five HTTPS cases covering explicit trust, wrong hostname, partial TLS interruption and deadline.
• Four config validation cases preserve private bytes before HTTP, UTF-8, and JSON rejection.
• Existing native HTTP, request-local cancellation, artifact upload and HTTPS regression suites pass.
• Same 13 HTTP/five HTTPS cases pass inside the official Bookworm image with libcurl 7.88.1.
• Migrated Sokoban WIP calls the required reader: ten actual startup failure/signal/privacy cases pass; trusted HTTPS configuration completes an ordinary two-decision game. A 20.3-second episode reserves existing 20-second cleanup and stops startup input after 0.399 seconds. Private checkpoint HTTP503 attempts one upload and emits no public result/replay.

Source and game tests retain synthetic fixture status; they confer no authenticated model authority. Immutable published game pins remain unchanged. A 56-checkout/21-repository audit found immutable Bitworld locks and no executable floating Bitworld install; this is task-checkout discovery, not fleet qualification. New game pins must migrate every input caller deliberately.

Proofs: /mnt/hdd/coworld-training-modernization-root-20261004/family-bitworld-runtime-input-c844; caller proof: family-sokoban-wip-prompt-export-9ffcf14/{startup-v22,startup-budget-v23,game-v24-https-greedy,startup-upload-v25}. All work is source-only; production deployment/reuploads remain held.