fix(airlib): protect SafetyEval std::max from Windows macros

[Bartok9]

Summary

• Parenthesize std::max in SafetyEval::getDestination breaking-distance clamp.
• Prevents MSVC windows.h min/max macro expansion from breaking the template call.

Motivation

Bare std::max(a, b) is unsafe when Windows headers define max as a macro (same class of fix as MultirotorApiBase lookahead protection in #9803 / portable subset of #4788). SafetyEval computes slam-braking destination distance with:

dest_pos_dist = max(velocity * vel_to_breaking_dist, min_breaking_dist)

No control gain or threshold change — operators and order are identical under (std::max)(...).

Verification

• Diff is one parenthesized call site in AirLib/src/safety/SafetyEval.cpp.
• Pattern parity with salvage: protect path lookahead std::max from Windows macros (credit @2750666716 #4788) #9803 lookahead protect (compile-time macro-safe form).
• Did not change MultirotorApiBase (owned by open salvage: protect path lookahead std::max from Windows macros (credit @2750666716 #4788) #9803) or flight/geofence policy.

Notes

• Spec: aerial-drone-pr-campaign/specs/airsim/2026-07-23-2b-safetyeval-stdmax.md
• Pivot: concurrent Bartok fix(python): type magnetometer covariance as list #9806 already owns Magnetometer covariance list tonight — left alone.
• AI-assisted; human-reviewed.

---

Agent-Owner: sera · Platform: hermes · Claim-TTL: 24h