feat(plot)!: harden pipeline, XY series, dash/markers, touch, packaging

Breaking: Series::gather emits x relative to x0() and takes a GatherMode;
consumers reconstruct absolute x in f64 before mapping (series.hpp documents
the contract).

Bugs, each pinned by a fail-before regression test:
- render: f32 staging quantised epoch-time x into 128 px columns; every
  data-space draw now stages to_space(x) - to_space(origin) with the origin
  folded into the offset uniform in f64 (epoch/zero-origin twins rasterise
  identically)
- ticks: major test was ULP-fragile and blanked epoch axes; majors are an
  integer-index test and are never truncated by the minor cap
- gather: LOD envelope emitted buckets straddling [begin,end); ceil/floor
  bucket edges + raw lead/trail spans
- live follow: log x axes held a linear span and zoomed every frame; span and
  offset now live in axis space (plot + both figure link-group paths)
- input: a zero-notch wheel disarmed auto_scale on every axis; dy==0 pans x,
  factor == 1 / inf refused in wheel and drag zoom
- render: the single text flush painted legend names over the crosshair
  readout panel; two batches, under flushed before the panel
- data: NaN dropped from min/max unless it seeded the fold; non-finite
  samples are now excluded from every aggregate and from cached bounds

Robustness: viewport normalisation (no clamp UB), non-finite range refusal,
pyramid level cap at 57 (no shift/div UB through public gather), rounded ring
capacity documented + pre-sized, GL blend func and UNPACK_ALIGNMENT
save/restore, Renderer::release_gl() teardown, u64 buffer epochs, annotation
captions clamped, button-aware GLFW row capture, cached figure row rects (no
per-event layout), ruler-pair measurement refused, span-nonfinite guards in
axis_ends.

Features: XY series (sorted x, binary-search neighbours/snap, LOD over sample
index); StreamSeries::freeze(); ArraySeries::push(); per-trace dash and
markers (scatter at width 0) with auto or literal stride; GatherMode
Envelope/Nearest/Mean via bucket_sum/sumsq; Style::line_aa_px; per-glyph text
colour (readout values in trace colour); wheel-dx x pan; arrow-key pan;
Escape cancels a drag and restores captured ranges; modifier-masked box zoom
(Shift both, Ctrl x, Alt y); double-click reset via PointerEvent::time_s;
ImGui key repeat unified; pinch gestures on Qt and GTK; pixelDelta wheel path
and DevicePixelRatioChange handling; GNUInstallDirs, SOVERSION,
SameMinorVersion, generated plot/version.hpp, relocatable plot.pc, licence
install, FILES_MATCHING, GitHub Actions CI (debug/coverage/asan).

Suite 283 -> 350 cases, 0 failed; coverage 93.9% (3730/3971) over 24 files,
floor 80/90 held; ASAN preset suite green; all four demos run headless (the
GTK scripted-resize check needs a window manager and fails identically on the
parent commit); readme_main.cpp committed and compiles with the README
command; pkg-config and find_package consumption verified from a relocated
install prefix.

cmake/plot_umbrella_check.cmake

@@ -32,6 +32,21 @@
 #                          to the list below; a caller may override it, and
 #                          emptying it is how a test proves the exemption is what
 #                          keeps a header out of the "missing" report.
+#   PLOT_EXTRA_PUBLIC_HEADERS  generated public headers, relative to
+#                          PLOT_INCLUDE_DIR, that the glob below cannot see
+#                          because configure_file() writes them into the build
+#                          tree (plot/version.hpp). They are checked like any
+#                          other public header: the umbrella has to name them,
+#                          and the dangling-include check cannot demand them
+#                          under PLOT_INCLUDE_DIR, because their existence is
+#                          pinned by the configure that generated them. Defaults
+#                          to the project's own list, on the same terms as the
+#                          optional list: exact paths, because a hole should be
+#                          a list of files.
+#   PLOT_GENERATED_INCLUDE_DIR  the build-tree directory those headers live in,
+#                          consulted when one of them is not under
+#                          PLOT_INCLUDE_DIR. Unset in a tree with no generated
+#                          headers.
 
 if(NOT DEFINED PLOT_OPTIONAL_HEADERS)
   set(PLOT_OPTIONAL_HEADERS
@@ -42,6 +57,18 @@ if(NOT DEFINED PLOT_OPTIONAL_HEADERS)
     "plot/text/true_type_font.hpp")
 endif()
 
+if(NOT DEFINED PLOT_EXTRA_PUBLIC_HEADERS)
+  set(PLOT_EXTRA_PUBLIC_HEADERS
+    # <plot/version.hpp>, generated by configure_file() from
+    # include/plot/version.hpp.in into the build tree and installed with the
+    # public headers. The glob cannot see it -- it is not under the source
+    # include root -- and neither can the dangling-include check, so the
+    # default list declares it: the umbrella must still carry its include, and
+    # a script run without the caller's -D inputs (the exemption test, a bare
+    # -P invocation) judges the umbrella exactly as the build does.
+    "plot/version.hpp")
+endif()
+
 if(NOT DEFINED PLOT_INCLUDE_DIR)
   message(FATAL_ERROR "plot: PLOT_INCLUDE_DIR is not set")
 endif()
@@ -52,6 +79,9 @@ endif()
 file(GLOB_RECURSE plot_umbrella_headers
   RELATIVE "${PLOT_INCLUDE_DIR}"
   "${PLOT_INCLUDE_DIR}/plot/*.hpp")
+if(PLOT_EXTRA_PUBLIC_HEADERS)
+  list(APPEND plot_umbrella_headers ${PLOT_EXTRA_PUBLIC_HEADERS})
+endif()
 list(SORT plot_umbrella_headers)
 file(READ "${PLOT_UMBRELLA}" plot_umbrella_text)
 
@@ -100,8 +130,19 @@ string(REGEX MATCHALL "#include <plot/[^>]+>" plot_umbrella_includes "${plot_umb
 set(plot_umbrella_dangling "")
 foreach(plot_umbrella_include IN LISTS plot_umbrella_includes)
   string(REGEX REPLACE "#include <([^>]+)>" "\\1" plot_umbrella_header "${plot_umbrella_include}")
+  # A declared generated header is exempt from the existence demand: it lives
+  # in the build tree by construction -- the configure that produced this
+  # umbrella also produced the header -- so a run without
+  # PLOT_GENERATED_INCLUDE_DIR set (a bare -P invocation) judges it on the
+  # umbrella naming it, which the required-set loop above already checked.
+  if(plot_umbrella_header IN_LIST PLOT_EXTRA_PUBLIC_HEADERS)
+    continue()
+  endif()
   if(NOT EXISTS "${PLOT_INCLUDE_DIR}/${plot_umbrella_header}")
-    list(APPEND plot_umbrella_dangling "${plot_umbrella_header}")
+    if(NOT DEFINED PLOT_GENERATED_INCLUDE_DIR OR
+       NOT EXISTS "${PLOT_GENERATED_INCLUDE_DIR}/${plot_umbrella_header}")
+      list(APPEND plot_umbrella_dangling "${plot_umbrella_header}")
+    endif()
   endif()
 endforeach()