[adrunkhuman]

Closes #267.

Raid-created monsters are absent from the static spawn-danger model. Bots can therefore accept a route through a lethal encounter, then repeat it after recovery.

• Combine innate raid definitions and activation/wave signals with bounded, private observations. Warnings survive event completion and reload; fresh visible clearance can override them. No hidden live-monster tracking or rebuild of the shared static heatmap.
• Apply route admission, live movement checks, withdrawal, and deferral across hunt, depot, service, trainer, progression, and loot work. Retain observed threats across death recovery.
• Freeze planning snapshots and revalidate concrete executable exposure, including installed routes and extended return paths. Ordinary creature movement no longer discards whole searches or return proofs.
• Preserve pending shops during temporary threat rejection or movement exclusions. Retry incomplete searches within a bound instead of reporting that the shop offer is unavailable.
• Add real raid travel/recovery scenarios and deterministic contracts for waves, cancellation, clearance, private memory, exposure changes, and planning churn.

Withdrawal is local, not a guarantee of escape from traps or faster pursuers. Script-only spawns have visible-threat handling but no inferred raid footprint. Later paid-travel legs replan at arrival; observations are not persisted across server restarts.

Mana-potion stocking and first-heal funding remain separate in #272.