feat(server-ng): harden listener, auth, shutdown, and disk-poll paths

[numinnex]

Silent failure modes become loud or typed: listeners no longer set
SO_REUSEPORT, so a stale process holding a port fails the bind instead
of splitting the accept queue (UDP/QUIC drops SO_REUSEADDR too, which
alone lets a second socket steal datagrams); a disk poll that cannot
resolve its partition dir mid-rotation now fails closed instead of
letting the journal-forward skip disk-resident offsets; rejected logins
get a typed Eviction frame with the real reason instead of an empty
reply; a wedged shard is abandoned at a configurable join deadline
instead of blocking process exit forever.

Cluster operability: a verify-only acceptance window for the retiring
PSK (cluster.auth.previous_shared_secret) makes key rotation a rolling
three-step instead of a coordinated restart, and replica TLS names are
keyed by replica id rather than roster position so sparse ids from
dynamic join cannot verify against another peer's name.

Also removes a stale rustdoc pointer to the already-landed resumable
TLS pump framing.

[codecov]

Codecov Report

❌ Patch coverage is 74.57627% with 90 lines in your changes missing coverage. Please review.
✅ Project coverage is 61.88%. Comparing base (74fb5e2) to head (031fbab).

Files with missing lines	Patch %	Lines
core/server-ng/src/bootstrap.rs	49.00%	50 Missing and 1 partial ⚠️
core/partitions/src/iggy_partition.rs	71.69%	13 Missing and 2 partials ⚠️
core/server-ng/src/auth.rs	76.47%	8 Missing ⚠️
core/server-ng/src/dispatch.rs	0.00%	8 Missing ⚠️
core/server-ng/src/server_error.rs	0.00%	7 Missing ⚠️
core/partitions/src/poll_plan.rs	83.33%	1 Missing ⚠️

Additional details and impacted files

@@              Coverage Diff              @@
##             master    #3774       +/-   ##
=============================================
- Coverage     75.56%   61.88%   -13.69%     
  Complexity      969      969               
=============================================
  Files          1317     1316        -1     
  Lines        154975   142754    -12221     
  Branches     128600   116457    -12143     
=============================================
- Hits         117105    88337    -28768     
- Misses        34327    50804    +16477     
- Partials       3543     3613       +70     

Components	Coverage Δ
Rust Core	58.58% <74.57%> (-16.95%)	⬇️
Java SDK	62.71% <ø> (ø)
C# SDK	71.13% <ø> (-1.16%)	⬇️
Python SDK	92.27% <ø> (ø)
PHP SDK	84.52% <ø> (ø)
Node SDK	95.30% <ø> (+0.07%)	⬆️
Go SDK	43.08% <ø> (ø)

Files with missing lines	Coverage Δ
core/configs/src/server_ng_config/cluster.rs	97.73% <100.00%> (+0.08%)	⬆️
core/configs/src/server_ng_config/sharding.rs	95.81% <100.00%> (+1.21%)	⬆️
core/message_bus/src/client_listener/mod.rs	73.07% <ø> (ø)
core/message_bus/src/client_listener/quic.rs	78.43% <ø> (+1.23%)	⬆️
core/message_bus/src/framing.rs	78.31% <ø> (ø)
core/message_bus/src/installer/replica.rs	85.97% <100.00%> (ø)
core/message_bus/src/replica/auth.rs	95.70% <100.00%> (+1.14%)	⬆️
core/message_bus/src/replica/handshake.rs	79.25% <ø> (ø)
core/message_bus/src/socket_opts.rs	91.30% <100.00%> (+8.95%)	⬆️
core/partitions/src/poll_plan.rs	64.45% <83.33%> (+0.69%)	⬆️
... and 5 more

... and 265 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.