Merge bfloat16-senbei workspace restructure, bump to 1.1.0

Adopts the fork's workspace split (senbei-cli / senbei-crypto / senbei-io /
senbei-metadata / senbei-pe), its structured error taxonomy, entry-transform
and layout validation, PE32 dd8 key-formula selection with a skip floor, the
CRT entry-stub dd8 oracle, and the extensionless-file scan skip.

Kept from senbei on top of the restructure:
- ManagedExe detection/routing and the CLR (COR20 + BSJB) metadata restore
  in the EXE pipeline.
- The RET+int3 padding fingerprint as the primary dd8 padding signal, ahead
  of the mutated-position 0xCC fallback.
- docs/, .github/, samples/, tests/ (moved to senbei-cli/tests), and the
  web/ wasm frontend (rewired to the split crates), all of which the fork
  had dropped.
- The fork's README compatibility matrix is not taken: it names real games,
  which the public-repo hygiene rules forbid.
- The wasm32 localtime fallback in logfile and unpack_bytes_force_exe (the
  web app's trap-recovery entry point), both lost in the restructure.

Golden corpus: 35/35 byte-identical. clippy -D warnings clean; wasm32 check
clean for the full workspace.

docs/design.md

@@ -7,41 +7,57 @@ no driver or proxy DLL is involved.
 
 ## Crate layout
 
-The crate is split into a pure core and a thin CLI shell:
+Senbei is a Cargo workspace split into a pure core and thin shells around it:
 
-- **`src/unpacker/`** — the core. Pure functions over byte slices: no file
-  I/O, no environment access (beyond a few debugging overrides, see
+- **`senbei-pe/`** — the core. Pure functions over byte slices: no file I/O,
+  no environment access (beyond a few debugging overrides, see
   [development.md](development.md)), panic-free at the public boundary (all
   internal panics are trapped and converted to `UnpackError::Corrupt`). This
   is what the WebAssembly build embeds.
-- **`src/` (top level)** — the CLI shell: argument parsing, recursive folder
-  scanning, per-run log file, progress bar, Explorer-friendly exit pause, and
-  the single-file/folder orchestration in `job.rs`.
-- **`src/metadata.rs`** — il2cpp `global-metadata.dat` method-token
+- **`senbei-crypto/`** — cryptographic, checksum, compression, and bytecode
+  primitives the core is built from. Same purity rules as `senbei-pe`.
+- **`senbei-metadata/`** — il2cpp `global-metadata.dat` method-token
   de-obfuscation (format version 31; other versions are left untouched).
+- **`senbei-io/`** — filesystem and orchestration: recursive folder scanning,
+  per-run log file, progress bar, Explorer-friendly exit pause, and the
+  single-file/folder orchestration in `job.rs` (incl. the wasm-safe in-memory
+  byte API used by the web frontend).
+- **`senbei-cli/`** — the `senbei` binary: argument parsing + dispatch. The
+  integration test suite (incl. the golden corpus test) lives in
+  `senbei-cli/tests/`.
 
 ```
-src/
-├── main.rs                argument parsing + dispatch
-├── lib.rs                 module roots
+senbei-cli/
+└── src/main.rs            argument parsing + dispatch
+senbei-io/src/
 ├── job.rs                 single-file + folder orchestration, out-naming,
 │                          companion splice, stub overlay/TLS restore,
 │                          pipeline routing (incl. the wasm-safe byte API)
 ├── scan.rs                recursive Crackproof + metadata discovery
-├── metadata.rs            il2cpp global-metadata.dat de-obfuscation
 ├── logfile.rs             per-run timestamped log
 ├── ui.rs                  progress bar + status lines
-├── pause.rs               Explorer-friendly exit pause
-└── unpacker/              pure, panic-free, no-I/O core
-    ├── mod.rs             detection + unpack_auto dispatch
-    ├── exe.rs             EXE pipeline (PE32+ and PE32)
-    ├── dll.rs             native + managed DLL pipeline
-    ├── integrity.rs       static post-unpack sanity check
-    ├── primitives.rs      decrypt_data* steps, key/shift selection
-    ├── bytecode.rs        bytecode VM
-    ├── parallel.rs        deterministic block-parallel fan-out
-    ├── tables.rs          constant tables
-    └── crc32.rs           checksum
+└── pause.rs               Explorer-friendly exit pause
+senbei-metadata/src/
+└── metadata.rs            il2cpp global-metadata.dat de-obfuscation
+senbei-crypto/src/
+├── primitives.rs          decrypt_data* steps, key derivation
+├── bytecode.rs            bytecode VM
+├── tables.rs              constant tables
+└── crc32.rs               checksum
+senbei-pe/src/engine/      pure, panic-free, no-I/O core
+├── mod.rs                 detection + unpack_auto dispatch
+├── error.rs               structured error taxonomy
+├── integrity.rs           static post-unpack sanity check
+├── parallel.rs            deterministic block-parallel fan-out
+├── layout/                layout discovery + validation
+│   ├── dd8.rs             .text dd8 key-formula + shift selection
+│   ├── discovery.rs       layout candidate discovery (trial-and-validate)
+│   └── image.rs           PE image reconstruction helpers
+├── exe/
+│   ├── pipeline.rs        EXE pipeline (PE32+ and PE32 orchestration)
+│   └── pipeline/pe32.rs   PE32-specific EXE restore
+└── dll/
+    └── pipeline.rs        native + managed DLL pipeline
 ```
 
 ## Detection and routing

docs/development.md

@@ -60,9 +60,9 @@ since binaries are not committed).
 
 ## Conventions
 
-- The `src/unpacker/` core is pure: no file I/O, no panics across the public
-  boundary, no `unsafe`. Keep it that way — it is what the WebAssembly build
-  embeds.
+- The `senbei-pe/` core (and its `senbei-crypto/` base) is pure: no file I/O,
+  no panics across the public boundary, no `unsafe`. Keep it that way — it is
+  what the WebAssembly build embeds.
 - Layout heuristics must **trial-and-validate**: never pick a candidate offset
   on shape alone and trust it; validate by decryption/checksum and fall
   through to the next candidate on failure. A silent wrong offset produces a