[MG_Util, MG_Test, MG_IntegrationTest, CI] (P6): one log per role, and every reader moved with it

The spawn work had the two roles append to one MOBILEGL_LOG_FILE_PATH under
O_APPEND. It was correct - two processes at one offset would corrupt the file,
O_APPEND made each write atomic - but it put two sessions' lines in one place
and made every per-side assertion a search. This splits the sink: the client
role writes <base>.client.log and the server role writes <base>.server.log.

THE BASE NAME NAMES NO FILE ANY MORE, AND THAT IS THE POINT. Leaving the
client at the old unsuffixed path would have been the compatible choice and the
wrong one: a reader that was not updated would go on finding a file, go on
passing, and go on seeing only half the session - and a refusal census that
reports a confident zero for the half it cannot see is worse than one that
fails. With both names moved, an un-updated reader gets "file not found" and
says so. There were 34 such readers; every one is moved here.

THE ROLE IS PER-THREAD, not per-process, because under inproc both roles are
threads of one process. Log.cpp keys the sink on a thread-local role: the apply
thread declares itself server (ServerLoop.cpp), a spawned image is server for
its whole life (MOBILEGL_IPC_ROLE=server, read once), and everything else is
the client. The naming rule (RoleLogPath) and the two whole-log operations
(ReadRoleLogs / TruncateRoleLogs) are EXPORTED from the library, so no reader
reimplements the derivation - a second copy is the copy that falls behind.

Readers, by how they read:
 - unit mains set MOBILEGL_LOG_FILE_PATH and read a role file: they keep the
   base in the env and derive the client path from the library helper.
 - the death-test child runners (ReadLog) now concatenate BOTH roles: a death
   test asserts the CHILD said something, and the applier's refusals - the very
   diagnostics these check - are written under the server role.
 - the offset-based Emit readers derive the client path once after setenv.
 - PipeStatsWindow reads both, because draws/vbs increment in the backend's
   PrepareForDraw - the apply thread, the server role - so the summary line is
   in the server file even under inproc.
 - run_trace_case.cmake's split census reads both files; the client keeps the
   transport markers.
 - split_log_paths.py (and its self-test, and the control stub) derive both
   role files from the declared base.
 - the Android script pulls both role files off the device and concatenates
   them, so every downstream check is unchanged - and it judges a role file by
   CONTENT, because `run-as test -f` through `exec-out` returned 0 for a missing
   file on the device and `exec-out` folds cat's own not-found line into stdout.
   The monolith arm legitimately has no server file, and that is a silent skip
   rather than a one-line server log.

Guarded so a pull build is untouched: RoleLogPath and the role sink are wholly
inside MOBILEGL_BUILD_DISAGGREGATED; a non-disaggregated build writes the base
path exactly as before. G1 re-measured - 0 symbol diff, .text unchanged at
0xa52203.

Verified on device 2f7cbe2e: monolith writes only the client log (no phantom
server log), inproc and spawn each write both and pass their transport proofs
(spawn: server role in pid 16125). Unit 2353 (one pre-existing environmental
failure), integration-split 186/186, integration-spawn 102/102, retrace 6/6,
control smoke 12/12, split-log-paths self-test 9/9.

.github/workflows/test.yml

@@ -1169,9 +1169,12 @@ jobs:
       - name: The split lane really resolved the transport
         working-directory: build-split
         run: |
-          log=MobileGL/MG_IntegrationTest/persistent-map-arm-split-DirectGLES.log
+          # P6: the sink writes one file per ROLE from the base MOBILEGL_LOG_FILE_PATH; the
+          # transport-resolution line is ConfigLoader's, on the CLIENT thread, so it is in the
+          # .client half. The base name itself names no file now.
+          log=MobileGL/MG_IntegrationTest/persistent-map-arm-split-DirectGLES.client.log
           if [ ! -f "${log}" ]; then
-            echo "::error::${log} does not exist: the DirectGLES.Split.PersistentMapArm. entry never ran, so nothing in this job establishes that MOBILEGL_TRANSPORT ever resolved to inproc in a live process"
+            echo "::error::${log} does not exist: the DirectGLES.Split.PersistentMapArm. entry never ran (or the per-role split renamed it), so nothing in this job establishes that MOBILEGL_TRANSPORT ever resolved to inproc in a live process"
             exit 1
           fi
           # THE DISTINCTIVE PART OF THE INFO LINE, not the bare KEY=VALUE (review finding M-5):
@@ -2649,7 +2652,7 @@ jobs:
         working-directory: build-retrace/tools/trace_replay
         env:
           CONTROL_TMPDIR: ${{ runner.temp }}
-          LIBRARY_LOG: ${{ matrix.case }}/${{ matrix.backend }}/output/mobilegl.log
+          LIBRARY_LOG: ${{ matrix.case }}/${{ matrix.backend }}/output/mobilegl.client.log
           FROZEN_LIBRARY: ${{ github.workspace }}/build-linux/libMobileGL.so
           # The control has to run the arm it is a control FOR. Hard-coded inproc, it would go on
           # proving something about the other arm while spawn ran unguarded.
@@ -2667,13 +2670,22 @@ jobs:
         if: always()
         working-directory: build-retrace/tools/trace_replay
         run: |
-          log="${{ matrix.case }}/${{ matrix.backend }}/output/mobilegl.log"
+          # BOTH ROLES, because under spawn every applier refusal is raised in the SERVER's
+          # process and a census reading only the client's file reports a confident zero for the
+          # half it cannot see.
+          log="${{ matrix.case }}/${{ matrix.backend }}/output/mobilegl.client.log"
+          server_log="${{ matrix.case }}/${{ matrix.backend }}/output/mobilegl.server.log"
           if [ ! -f "${log}" ]; then
             echo "no ${log} - the replay wrote no library log"
             exit 0
           fi
-          echo "Fatal{ lines: $(grep -c 'Fatal{' "${log}" || true)"
-          grep -o 'Fatal{[A-Za-z]*, "[^"]*"' "${log}" | sort | uniq -c | sort -rn | head -20 || true
+          census_files="${log}"
+          if [ -f "${server_log}" ]; then census_files="${census_files} ${server_log}"; fi
+          echo "census over: ${census_files}"
+          echo "Fatal{ lines: $(cat ${census_files} | grep -c 'Fatal{' || true)"
+          cat ${census_files} | grep -o 'Fatal{[A-Za-z]*, "[^"]*"' | sort | uniq -c | sort -rn | head -20 || true
+          # The transport line is the CLIENT's: ConfigLoader resolves it there, and under spawn
+          # the server states its own separately.
           grep -m1 "MOBILEGL_TRANSPORT=" "${log}" || echo "no transport line in ${log}"
 
       - name: Upload core dumps