Add bounded acknowledged telemetry delivery

[nicodes]

Team No Review self-verification evidence

Tracks aviorstudio/fieldsofrevik#156 (behavior layer 2/2; does not auto-close the cross-repository issue).

• Source: aviorstudio/gd-telemetry head c4cd043bec5dbb4e23400a5c74cd7edd0f8cad72, stacked on PR Harden telemetry test and release gates #10 head 87a0d17978a0528e094586c6a386d504c2b2de05. Rebase replay was trivial: old/new behavior patch ID 7fb2b54e32698d3b00cf874bf39f5767ef7c3003.
• Decision consumed: D-11 plus caller-confirmed values: maximum 1,000 retained queued+in-flight events; oldest queued eviction, never mutate in-flight; newest rejection when in-flight alone fills capacity; boolean async acknowledgement; initial attempt + 3 retries; 0.5/1/2s capped backoff; 10s per-attempt timeout; explicit caller statuses/counters; no durable storage.
• Criterion PASS: acknowledgement-only removal and serialization-failure preservation; callback false/invalid/timeout retries; FIFO retry identity; isolated pending batch; duplicate flush BUSY; explicit cancellation/shutdown outcomes; invalid-callback pressure remains capped; separate oldest/newest drop counters; timer reconfigure/disable/reenable/owner destruction/idempotent stop.
• Tests: Godot suite TEST_ASSERTIONS_REACHED=1/1; all gate negative/restored controls and clean installed ZIP editor lifecycle rerun after the stack rebase.
• Versions/commands: Godot 4.7.2.stable.official.ed1daf0bf on Linux x86_64; same exact commands documented on PR Harden telemetry test and release gates #10, including 60s production tests, 1s hang control, and four editor starts.
• Local artifact: deterministic ZIP SHA-256 c503b76dbf273d8e87eed8abcbbacc1658ce132e6cd45ee6ed1c441548a6c9f5; installed-tree SHA-256 5a94aebb9363e9a871efd0feed31b6c126c322b938bb9f2a300b88d5fcfea85e.
• Browser evidence: N/A; no browser UI or web-specific code path. Native/editor and package checks are the applicable acceptance evidence.
• Exact-head CI: pending for this SHA; merge remains blocked until green.
• Untested/residual: callbacks cannot make remote transports durable; post-merge GitHub Release/GDAM registry and actual installed release bytes remain mandatory; no heavy benchmark.

[nicodes]

Exact-head CI update: PASS for c4cd043bec5dbb4e23400a5c74cd7edd0f8cad72 at https://github.com/aviorstudio/gd-telemetry/actions/runs/34717167512 (job 103616387087). All criterion evidence in the PR body remains current. Merge is blocked only by the required board transition/readback while shared GraphQL quota is exhausted.