feat(M4): Windows WinForms client, TOFU identity pinning, VAD threshold + always-on mode

Core ABI extensions (voicecat.h):
- vc_list_channels / vc_list_users / vc_list_user_streams — pull-based snapshot getters
  for the channel-tree and user-list UI; session_model_mu_ guards cross-thread reads
- VC_EVENT_JOIN_RESULT / vc_join_channel — channel join with optional password
- VC_EVENT_SERVER_IDENTITY + vc_confirm_server_identity — TOFU gate that blocks io_thread_
  until the UI approves or rejects; pins TLS leaf-cert SHA-256 (not declared Ed25519)
- vc_get_server_identity_display — Ed25519 fingerprint for human-readable display only
- VC_INPUT_ALWAYS_ON = 2 in vc_input_mode — transmit unconditionally, no VAD gate
- vc_set_vad_threshold — live RMS threshold update (0.0–1.0); EnergyVadProcessor stores
  it atomically so the audio RT path reads without a lock

C++ implementation:
- SessionModel::apply_snapshot / apply_channel_event fixed to populate parent_id,
  password_protected, and max_users (were permanently zeroed)
- TlsContext::peer_cert_fingerprint — SHA-256 of peer leaf cert DER via mbedTLS
- TofuStore split into peek (read-only) + pin (write) so first-connect only persists
  after user approval; tofu_store_path in vc_config for per-user pin file location
- TcpAcceptor uses dual-stack IPv6+IPv4 fallback (fixes localhost → ::1 on Windows)
- windows-client CMake preset: Release shared DLL, static MinGW runtime, no tools/tests
- New C++ tests: test_channel_user_list_abi, test_tofu_flow (14/14 green)

Windows client (clients/windows/ — .NET 10 WinForms):
- VoiceCat.Interop: LibraryImport P/Invoke surface, UnmanagedCallersOnly callbacks,
  Channel<VoiceCatEvent> event delivery drained by 30ms WinForms Timer
- VoiceCat.App: ConnectDialog (saved servers, DPAPI password storage), ServerIdentity-
  Dialog (TOFU first-connect / mismatch warning), MainForm (channel TreeView, user
  ListBox, RichTextBox chat, voice controls, device pickers, VAD/PTT/always-on mode,
  per-user gain/mute/NR tuning, VAD sensitivity TrackBar, level meter ProgressBar)
- PttKeyCaptureDialog — focus-scoped PTT key capture (documented limitation)
- PerUserTuningDialog — real-time gain/mute/NR applied to all of a user's streams
- Accessibility: explicit AccessibleName/Description on every control, & mnemonics,
  Activity log ListBox as durable screen-reader record, AutomationNotification for
  curated live announcements

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

clients/windows/VoiceCat.App/Forms/ConnectDialog.Designer.cs

@@ -0,0 +1,83 @@
+namespace VoiceCat.App.Forms;
+
+partial class ConnectDialog
+{
+    private System.ComponentModel.IContainer components = null!;
+    private Label lblServers = null!;
+    private ListBox lstServers = null!;
+    private Button btnConnect = null!;
+    private Button btnAddNew = null!;
+    private Button btnEdit = null!;
+    private Button btnRemove = null!;
+    private Label lblStatus = null!;
+
+    protected override void Dispose(bool disposing)
+    {
+        if (disposing) components?.Dispose();
+        base.Dispose(disposing);
+    }
+
+    private void InitializeComponent()
+    {
+        components = new System.ComponentModel.Container();
+        lblServers = new Label();
+        lstServers = new ListBox();
+        btnConnect = new Button();
+        btnAddNew = new Button();
+        btnEdit = new Button();
+        btnRemove = new Button();
+        lblStatus = new Label();
+
+        lblServers.Text = "&Saved servers:";
+        lblServers.AutoSize = true;
+        lblServers.Location = new Point(12, 12);
+        lblServers.TabIndex = 0;
+
+        lstServers.AccessibleName = "Saved servers";
+        lstServers.Location = new Point(12, 32);
+        lstServers.Size = new Size(360, 200);
+        lstServers.TabIndex = 1;
+        lstServers.SelectedIndexChanged += (_, _) => UpdateButtonsEnabled();
+
+        btnConnect.Text = "&Connect";
+        btnConnect.Location = new Point(384, 32);
+        btnConnect.Size = new Size(110, 27);
+        btnConnect.TabIndex = 2;
+
+        btnAddNew.Text = "&Add new...";
+        btnAddNew.Location = new Point(384, 65);
+        btnAddNew.Size = new Size(110, 27);
+        btnAddNew.TabIndex = 3;
+
+        btnEdit.Text = "&Edit...";
+        btnEdit.Location = new Point(384, 98);
+        btnEdit.Size = new Size(110, 27);
+        btnEdit.TabIndex = 4;
+
+        btnRemove.Text = "&Remove";
+        btnRemove.Location = new Point(384, 131);
+        btnRemove.Size = new Size(110, 27);
+        btnRemove.TabIndex = 5;
+
+        lblStatus.AccessibleName = "Connection status";
+        lblStatus.Location = new Point(12, 244);
+        lblStatus.Size = new Size(482, 23);
+        lblStatus.TabIndex = 6;
+
+        AutoScaleMode = AutoScaleMode.Font;
+        ClientSize = new Size(506, 280);
+        Controls.Add(lblServers);
+        Controls.Add(lstServers);
+        Controls.Add(btnConnect);
+        Controls.Add(btnAddNew);
+        Controls.Add(btnEdit);
+        Controls.Add(btnRemove);
+        Controls.Add(lblStatus);
+        AcceptButton = btnConnect;
+        MinimizeBox = false;
+        MaximizeBox = false;
+        FormBorderStyle = FormBorderStyle.FixedDialog;
+        StartPosition = FormStartPosition.CenterScreen;
+        Text = "VoiceCat — Connect to a server";
+    }
+}