Measure real EnqueueFrame outcomes, then size the send window to fit RTT

Every "fix" for the mirroring freezes so far has been reasoned from code
rather than measured, because the one counter that could have falsified any
of them was blind by construction: `enqueue_frame` returns as soon as a frame
is *posted* to openscreen's TaskRunner, long before `Sender::EnqueueFrame`
decides whether to accept it. The frame pump's `enqueued_fps` therefore read a
healthy 30fps through every freeze.

Add `BreadcastEnqueueStats` (new FFI accessor, no behaviour change): per-second
counts of OK / MAX_DURATION_IN_FLIGHT / REACHED_ID_SPAN_LIMIT /
PAYLOAD_TOO_LARGE, plus the in-flight window gauges and RTT sampled at the
enqueue attempt, all surfaced on the existing "frame pump rate" line as
`accepted_fps` / `rejected_*`.

Measured against the real Chromecast, that settles it: 12.2% of frames were
being rejected with MAX_DURATION_IN_FLIGHT, in 85% of all seconds -- steady,
not just during visible freezes. Since breadcast enqueues already-encoded
frames, each rejection silently breaks the H.264 reference chain rather than
merely dropping a frame.

The measurement also corrects the diagnosis. The send window is
clamp(2*RTT, kMinSenderInFlight, target_playout_delay/3); the assumption was
that a LAN pins it to the 66ms floor. It does not -- RTT to this receiver runs
42-189ms, so 2*RTT is 84-378ms and the window was pinned at the *ceiling*,
133ms at a 400ms playout delay. The ceiling was the binding constraint, so
raising the floor alone would have changed nothing.

So raise both, ceiling first: target playout delay 400ms -> 1200ms (ceiling
133ms -> 400ms) and kMinSenderInFlight 66ms -> 200ms for RTT dips. Measured
over a matched 65s steady-state window, rejections fall 12.2% -> 4.3% and
seconds containing a broken reference chain 85% -> 40%. Costs ~800ms of
added latency, which is unnoticeable for mirroring to a TV.

This is an improvement, not a cure. The residual rejections are bursts
(in-flight seen at 433ms against a 200ms window, RTT spiking to 221ms), and no
static window survives those. The real fix is the backpressure contract
sender.h documents and this facade still doesn't implement: consult
GetInFlightMediaDuration()/GetMaxInFlightMediaDuration() and throttle *before*
encoding, so a skipped frame never leaves a dangling reference behind.

breadcastd/src/cast_mirror.rs

@@ -373,9 +373,25 @@ fn frame_pump_loop(
                 current_kbps = next_kbps;
                 set_video_bitrate_kbps(encoder, current_kbps);
             }
+            // `enqueued_fps` counts *posted* frames, not accepted ones (see
+            // `CastStreamSender::enqueue_stats`) -- it is the `accepted_fps`
+            // and `rejected_*` fields below that say whether video is
+            // actually reaching the receiver. A run where `enqueued_fps`
+            // holds at 30 while `accepted_fps` drops to 0 is a frozen
+            // picture, and nothing else logged here would show it.
+            let stats = sender.enqueue_stats();
             tracing::debug!(
                 pulled_fps = pulled_since_log,
                 enqueued_fps = enqueued_since_log,
+                accepted_fps = stats.enqueue_ok,
+                rejected_in_flight = stats.enqueue_max_duration_in_flight,
+                rejected_id_span = stats.enqueue_id_span_limit,
+                rejected_too_large = stats.enqueue_payload_too_large,
+                dropped_non_monotonic = stats.dropped_non_monotonic,
+                in_flight_frames = stats.in_flight_frames,
+                in_flight_ms = stats.in_flight_ms,
+                max_in_flight_ms = stats.max_in_flight_ms,
+                rtt_ms = stats.round_trip_time_ms,
                 bitrate_kbps = current_kbps,
                 estimated_bandwidth_bps = sender.estimated_bandwidth_bps(),
                 "frame pump rate"