fix(cua-driver): retry safe Hyprland stale geometry refusals

[f-trycua]

Problem

Freshly mapped native Wayland windows can change geometry between Hyprland input-v3 target attestation and action dispatch. The plugin safely refuses the stale revision before consuming authority or emitting input, but Driver 0.26.1 surfaces that transient refusal immediately.

Refs #3731. Refs omacom/omarchy-pkgs#346.

Change

• retry exactly once only for the canonical production stale_geometry refusal with no delivery/effect fields;
• re-attest the live compositor and request a fresh target token, revision, geometry, and sequence;
• preserve drag-start ownership across the pre-dispatch retry;
• never retry transport errors, malformed/unknown outcomes, partial delivery, acknowledged actions, or non-canonical refusals.

Validation

• PR CI: all required checks pass, including 439 Linux platform tests and the three new foreground/background retry tests;
• canonical Linux desktop E2E: run 34555030604, all lanes pass at candidate ea6ad2d40d4b018a216642177f907289c33a2c38;
• independent final review found no correctness or safety regression.

Omarchy Fleet replay

Exact candidate:

• source: ea6ad2d40d4b018a216642177f907289c33a2c38
• Linux artifact job: 103124818030
• binary archive SHA-256: 43c487266ab03fc0096d835b2f2d66eeb3994feba637e1679db34cbccade8376
• embedded cua-driver SHA-256: d6cb8756eb1520d1e3c6302527a270f6c6c847281e0ef8988b9c12e714671aa7
• plugin module SHA-256: 65e362aba8b0b6c187b1952791e5a57705cf22262ec100b1c8c6d9ed18215324
• Hyprland 0.56.2-2; Inkscape 1.4.4-6

Four required cells:

• linux-electron-drag-px-foreground: pass, 4677 ms
• linux-electron-editor-save-ax-foreground: pass, 6417 ms
• linux-tauri-drag-px-foreground: pass, 6320 ms
• linux-gtk3-desktop-scroll-px-foreground: pass, 3913 ms

Evidence archive SHA-256: 9adbba75b52481e93b5352052b88d572ee1686b85676d3054a51a5f7e49ba1e9. Final pool cleanup and independent namespace absence checks passed.

The manual cross-platform artifact workflow's Linux x86_64 build passed; its overall failure was an unrelated packaged-discovery job and is not used as a PR gate. The normal PR discovery/check suite is green.