feat(strategy27): display independent compound candidates

[jackhai9]

Summary

• Consume server-computed compound candidates through an independent validated cursor and optional-job boundary; no Binance market-data connection or trading action is added.
• Display dark directional native arrows with short candidate labels and independent slots for simultaneous rules.
• Add bounded compound history to the existing draggable panel, with explicit exploratory and unvalidated-mirror evidence details.
• Publish version 0.4.0 with unchanged script namespace and raw installation/update URLs; synchronize installation descriptions.

Validation

• Full npm test: 729 passed, 0 failed.
• npm run build:binance-strategy27-events: passed.
• npm run check:binance-userscripts: passed.
• Generated-artifact release contract: version 0.4.0, 123124 bytes, SHA-256 2115a2fb62098dc93b4073bc5da4d58b480bdf8346e4fdd7675027f7e3259f00.
• Source and generated-artifact integration tests cover paired entities, independent clients, replay, pruning, manual clear, and context retirement.
• The actual panel module and native compound drawing module were visually inspected in isolated synthetic/public-demo pages. The native demo uses its own one-hour resolution, not Binance 1S.
• git diff --check: passed.

Rollout and limits

• Merge only after the companion CorsairQuant server/gateway release is verified.
• Server/gateway PR: https://github.com/jackhai9/CorsairQuant/pull/324.
• Actual Binance 1S create/readback/remove behavior and Tampermonkey exact installed/loaded-source readback remain unverified because browser control is unavailable.
• No financial actions were performed. Candidate accuracy is exploratory; low candidates are unvalidated mirrors.
• Unrelated orderbook/depth/Bollinger changes are excluded from this PR.

Independent review

2026-09-04: read-only Codex reviewer review_release_readiness inspected transport, entrypoint, artifact identity, and release sequencing. Verdict: go for source publication after the server/gateway release; actual Binance/Tampermonkey acceptance remains outstanding. Earlier chart/controller review findings were addressed with concrete lifecycle, cleanup, placement, and observation-time regressions. The release reviewer reported no attempted or performed writes; post-review status and reflog checks showed no unexpected mutations.