refactor(core)!: data-plane de-Any — fuse typed pipelines at registration (036 W1)

[lxsaah]

Summary

Implements W1 — data-plane de-Any from design 036: #131 removed the control-plane erasure; this removes the per-message kind. The typed pipeline is fused inside closures at registration time (finish(), where T is known), so no Box<dyn Any> is constructed on any per-message path — connectors, session pumps, AimX client mirroring.

Path	Before (per message)	After
Inbound	deserialize → Box<dyn Any> → produce_any downcast, boxed future	sync IngestFn (deserialize + produce, typed; no box, no Box::pin)
Outbound	subscribe_any → recv_any → Box<dyn Any> → SerializerFn(&dyn Any) downcast	fused SerializedReader::recv(ctx) → SerializedValue { dest, payload }
Dynamic topic	topic_any(&dyn Any) downcast	typed TopicProvider<T> called inside the fused reader
Join fan-in	Box<dyn Any> per input	kept deliberately — it is the multi-type join API (documented on JoinTrigger)

Design decisions

• Sync ingest (decision 2026-06-11): Producer::produce is sync + infallible (design 029), so IngestFn = Arc<dyn Fn(&RuntimeContext, &[u8]) -> Result<(), String>> and Router::route becomes a sync fn. The 036 sketch's ConsumeContext doesn't exist in core — RuntimeContext is threaded per call (raw variants skip the per-message ctx clone).
• Router::route ctx is mandatory — every production caller already passed Some(&ctx); the context-skip branch is unrepresentable inside fused closures (its test removed with the semantics).
• Reader error contract pins pump behavior: buffer errors propagate unchanged (BufferLagged → skip, other → stop); serialize failures are logged + skipped inside the reader (log line moves — see CHANGELOG).
• Deleted with the downcasts: ProducerTrait/ConsumerTrait/AnyReader, SerializerKind/DeserializerKind + their Fn aliases, TopicProviderAny/Wrapper/Fn, SerializeError::TypeMismatch, and dead ConnectorClient/OutboundConnectorLink/create_producer_trait.

Compatibility

• Registrar API is source-compatible: with_serializer/_raw, with_deserializer/_raw, with_topic_provider, link_to/link_from keep identical signatures. Examples, codegen output, and aimdb-pro compile with zero source changes (verified cargo check --workspace).
• Builder validation (refactor(core): replace panic-based builder validation with collected configuration errors from build() #133 contract) keeps the exact ConfigError strings and order; existing *_records_error tests pass unmodified.
• MQTT/KNX connectors pass routes opaquely into RouterBuilder::from_routes/pump_* — untouched. Websocket connector: internal-only (WsDispatch ctx non-optional, sync route call).

Acceptance criteria (036 §W1)

• ✅ grep -rnE "dyn (core::any::)?Any\b" aimdb-core/src hits only setup-time uses: ExtensionMap, AnyRecord::as_any/as_any_mut, DynBuffer::as_any, the per-connection session auth ext slots, and the documented join exception. (036 acceptance line amended — the literal "dyn Any" grep had missed the latter two.)
• ✅ KNX fake-gateway test (tunnel_roundtrip_against_fake_gateway) and the session smoke suites (session_smoke.rs, connectors_smoke.rs, embassy_smoke.rs) pass unmodified.
• ✅ make build, make test, make test-embedded, make clippy (incl. thumbv7em), make fmt-check green.

New tests

• Fused-reader unit tests: buffer-error propagation script (Ok, Lagged, Ok, Closed), serialize-skip, dynamic-topic resolution.
• End-to-end roundtrips through AimDbBuilder::build(): outbound (collect → subscribe → recv yields dest + payload; context-over-raw override) and inbound (ingest produces into the buffer; bad bytes propagate Err, nothing produced; both override directions).
• Router tests rewritten to counting ingest closures (simpler than the old MockProducer).

🤖 Generated with Claude Code