feat(all): add game SDK and harden client login and game rules

- Add costume burst upgrades with durable replay and fix permanent SR equipment gacha.
- Add server game.json rules for optional collaboration UR weapons, with packaging and documentation.
- Add GameNames/GameSdk NuGet tooling, readable types, reobfuscation, complete source/PDB navigation and shared-runtime installation.
- Split plugin responsibilities, prefer typeof/nameof, centralize MSBuild settings and ignore local paths; remove the unused LoginUI test project.
- Fix login recovery and TLS through native platform HTTP and a private game relay; read device region directly from the OS time zone.

Validation: go test ./... -count=1, go vet ./..., plugin Release builds, SDK/runtime self-tests, Roslyn embedded-source navigation, gofmt check and git diff --check.

go/cmd/bd2client/dev_sdk_integration_test.go

@@ -0,0 +1,28 @@
+//go:build !release
+
+package main
+
+import (
+	"os"
+	"testing"
+)
+
+// Opt in on a developer machine with the game installed. Exercise the exact
+// --dev run preparation path without starting the interactive Wails window.
+func TestDevelopmentRunBuildsPluginsWithEmbeddedNames(t *testing.T) {
+	if os.Getenv("BD2_TEST_DEVELOPMENT_BUILD") != "1" {
+		t.Skip("set BD2_TEST_DEVELOPMENT_BUILD=1 to build against go/config.json")
+	}
+	args, options, err := developmentRunOptions([]string{"--dev", "run"})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(args) != 0 {
+		t.Fatalf("unexpected runtime arguments: %v", args)
+	}
+	for _, path := range []string{options.localIdentityPlugin, options.loginUIPlugin} {
+		if !clientDevelopmentFile(path) {
+			t.Fatalf("development plugin output missing: %s", path)
+		}
+	}
+}