Harden terminal snapshots and update Refstream

[TeoSlayer]

What changed

• suppress renderer-generated replies while restoring terminal snapshots, preventing historical capability queries from corrupting live tmux/TUI input
• apply the same protection to public shares and authenticated app sessions
• update the verified vendored Refstream browser build to v0.1.0-alpha.5
• document tmux, Herdr, and mosh compatibility behavior and prepare v0.15.1

Validation

• real browser tests with tmux 3.7c in xterm.js and Refstream, including first input and a second viewer
• Herdr 0.9.0 input, modal redraw, and split panes
• mosh 1.4.0 localhost server/client input and second-viewer restoration
• root: 95 tests, TypeScript checks, web build, installers, deployment guard, QEMU manifest, SEO/mobile checks
• app: 841 tests, protocol check, production-shaped build and lint
• Go: go vet and go test -race ./...
• release: all 38 CLI targets built; 78 download files verified