ObjC: replace libffi with an owned native ABI dispatcher

[chrisbbreuer]

Parent: #459
Depends on: #462

Goal

Remove the Objective-C bridge's libffi dependency and implement the required native-call ABI machinery in zig-utils-owned Zig/assembly code.

Today src/objc_bridge.m includes <ffi/ffi.h> and Objective-C bridge tests link -lffi. This violates the owned-dependency target even though the core engine is pure Zig.

Scope

• Inventory every Objective-C/block signature the pinned macOS bridge profile accepts: integer widths/signs, floats, doubles, pointers/objects/selectors/classes, void, and supported struct returns/arguments (CGPoint, CGSize, CGRect, NSRange, including ABI classification).
• Define a stable Zig call descriptor and architecture-specific lowering for supported macOS AArch64 and x86-64 ABIs.
• Preserve block invocation, exported-method dispatch, exceptions, autorelease/lifetime behavior, reentrancy, recursive/cyclic Foundation conversion, and failure injection.
• Reject unsupported encodings explicitly before invocation; do not silently reinterpret, truncate, or route through a slower foreign library.
• Keep Foundation/Objective-C as the platform API being implemented, not as a source of JavaScript execution.

No-workaround rules

• Do not vendor or dynamically load libffi.
• Do not shell out, use generated C trampolines per call, restrict the published profile to avoid hard signatures, or retain a hidden -lffi fallback.
• Do not use undefined Zig calling-convention/layout behavior; ABI conformance needs byte-level fixtures.

Acceptance

• No ffi/ffi.h, ffi_*, -lffi, or linkSystemLibrary("ffi") remains.
• Header, runtime, lifetime, sanitizer, and fault-injection Objective-C suites pass on every declared macOS architecture.
• Differential transcripts against the pinned system JSC bridge remain exact.
• ABI fixtures cover register/stack splits, alignment, mixed scalar/struct signatures, return conventions, exceptions, and nested/reentrant calls.
• The owned dispatcher has focused microbenchmarks and does not regress bridge call throughput by more than the accepted noise gate.

Foundation

The completed bridge inventory and semantics are tracked by #138 and its children; preserve that contract exactly.

[chrisbbreuer]

Implementation landed on main in 63ccdb26.

What changed:

• removed ffi/ffi.h, every ffi call/preparation path, every -lffi, and every build-system ffi link;
• added a stable 56-byte C/Zig descriptor and Zig classification for all pinned scalar, pointer/object/class/selector, CGPoint, CGSize, CGRect, and NSRange encodings;
• added unwind-safe owned Darwin AArch64 and x86-64 assembly leaves for register/stack loading, calls, and scalar/HFA/sret capture;
• kept arbitrary argument counts via caller-sized scratch, explicit pre-invocation rejection, one failure-atomic allocation, and no fallback/trampoline generation;
• added focused ABI and benchmark runners.

Verification is green: native arm64 and Rosetta x86-64 register/stack/aggregate/sret/pointer/reentry/exception/fail-before-entry fixtures; Debug, ReleaseSafe, and TSan; complete Objective-C evidence matrix; exact 18-row system-JSC transcript; ASan/UBSan; 200-cycle lifetime stress; deterministic faults; 0 leaked bytes.

Performance is the only remaining checkbox before closure. An order-balanced 7-pair exact-parent diagnostic on battery showed block 0.998x parent (candidate RSD 8.81%, noisy) and JSExport 1.027x parent (RSD 1.95%). Per the evidence policy I am not promoting that battery run or calling the <=10% gate passed. #463 stays open for the quiet AC-powered exact-parent run; the raw diagnostic remains temporary.