[AZ-329] [AZ-330] [AZ-523] [AZ-524] Batch 44 atomic refactor

Implements two new C12 services and rebalances the C11/C12 boundary
in one atomic commit:

* AZ-329 PostLandingUploadOrchestrator — gates C11 upload on the
  `flight_footer` FDR record's `clean_shutdown` field; 4 refusal
  modes; new FdrFooterReader Protocol + LocalFdrFooterReader.
* AZ-330 OperatorReLocService — AC-3.4 visual-loss re-localization
  hint; reuses shared LatLonAlt; OperatorCommandTransport Protocol
  cut (E-C8 owns the future pymavlink concrete); new FDR record
  kind `c12.reloc.requested`; log redaction (lat/lon 5 decimals,
  reason 200 chars).
* AZ-523 C11 internal flight-state gate removed (SRP refactor):
  `confirm_flight_state` / `FlightStateSignal` use /
  `FlightStateNotOnGroundError` deleted from C11; TileUploader
  contract bumped to v2.0.0 (frozen) with migration note; AZ-317
  superseded.
* AZ-524 Package rename `c12_operator_tooling` →
  `c12_operator_orchestrator` across source, tests, pyproject,
  CMake, Dockerfile, compose, CI, runtime-root services class
  (`OperatorOrchestratorServices`) + factory function
  (`build_operator_orchestrator`), logger namespaces, config slug,
  docs, and the E-C12 epic title.

Tests: 1543 passed, 80 skipped (all environment gates). Targeted
AC suite (AZ-329 + AZ-330 + FdrFooterReader): 37 passed. Cold-start
NFR-perf still ≤ 500 ms p99.

Tracker: AZ-317 → Done (superseded); AZ-319 v2.0.0 contract bump
comment; AZ-329/AZ-330 → In Testing; AZ-253 epic renamed; AZ-523
+ AZ-524 created and closed as audit-trail tickets.

See `_docs/03_implementation/batch_44_cycle1_report.md`.

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/unit/c11_tile_manager/test_protocol_conformance.py

@@ -33,17 +33,12 @@ class _NullSleep:
         return None
 
 
-class _PartialFakeMissingConfirm:
-    """Conformance counterexample: missing ``confirm_flight_state``."""
+class _PartialFakeMissingEnumerate:
+    """Conformance counterexample: missing ``enumerate_pending_tiles``."""
 
     def upload_pending_tiles(self, request: object) -> object:  # noqa: ARG002
         return None
 
-    def enumerate_pending_tiles(
-        self, flight_id: object | None = None
-    ) -> list[object]:  # noqa: ARG002
-        return []
-
 
 class _PartialDownloaderMissingEnumerate:
     """Conformance counterexample: missing ``enumerate_remote_coverage``."""
@@ -67,7 +62,6 @@ def test_ac12_concrete_uploader_satisfies_protocol() -> None:
         http_client=httpx.Client(transport=transport),
         tile_store=object(),  # type: ignore[arg-type]
         tile_metadata_store=object(),  # type: ignore[arg-type]
-        flight_state_gate=object(),  # type: ignore[arg-type]
         key_manager=object(),  # type: ignore[arg-type]
         fdr_client=FakeFdrSink(_PRODUCER_ID),  # type: ignore[arg-type]
         logger=logging.getLogger("test_az319_conformance"),
@@ -81,7 +75,7 @@ def test_ac12_concrete_uploader_satisfies_protocol() -> None:
 
 def test_ac12_partial_fake_is_not_protocol_conformant() -> None:
     # Assert
-    assert not isinstance(_PartialFakeMissingConfirm(), TileUploader)
+    assert not isinstance(_PartialFakeMissingEnumerate(), TileUploader)
 
 
 def test_ac10_concrete_downloader_satisfies_protocol() -> None:
@@ -129,7 +123,6 @@ def test_ac9_idempotent_retry_decorator_satisfies_uploader_protocol() -> None:
         http_client=httpx.Client(transport=transport),
         tile_store=object(),  # type: ignore[arg-type]
         tile_metadata_store=object(),  # type: ignore[arg-type]
-        flight_state_gate=object(),  # type: ignore[arg-type]
         key_manager=object(),  # type: ignore[arg-type]
         fdr_client=FakeFdrSink(_PRODUCER_ID),  # type: ignore[arg-type]
         logger=logging.getLogger("test_az320_inner"),