refactor(architecture): enforce component layering constraints

- move runtime policy/diag contracts to domain-owned facade and remove control_plane leapfrog usage

- enforce single declaration point for direct debug config in domain public API (constraint #6)

- harden timeout/idempotent semantics in REST/voice/printer/wifi/ble paths

components/domain/CMakeLists.txt

@@ -9,6 +9,7 @@ idf_component_register(
         "src/image_generation.c"
         "src/screen_preview.c"
         "src/system_runtime.c"
+        "src/domain_runtime_contracts.c"
         "src/voice_interaction.c"
         "src/voice_interaction_common.c"
         "src/voice_interaction_ws.c"
@@ -19,9 +20,9 @@ idf_component_register(
         "third_party/qrcodegen.c"
     INCLUDE_DIRS
         "include"
-        "third_party"
     PRIV_INCLUDE_DIRS
         "internal"
+        "third_party"
     REQUIRES
         platform
         esp_http_client