test(core,data): verify schema-v3 round-trip; pin upstream git deps

- solitaire_data: add game_state_v3_mid_game_round_trip — first test to
  exercise the schema-v3 instruction-replay path with a real mid-game
  state (draws + card move + undo); GameState::PartialEq validates all
  pile layouts, score, move_count, undo_count, and recycle_count
- solitaire_data: add save_format_v2_is_rejected — schema-version gate
  test, parallel to the existing v1 rejection fixture
- solitaire_core: add SavedInstruction proptest (256 random cases across
  all three instruction variants) and four boundary unit tests for
  out-of-range Tableau/Foundation/SkipCards values
- solitaire_core: document pile() KlondikePile::Stock → waste mapping
- solitaire_core: document replay_config() take_from_foundation=true
  invariant and the re-export policy for upstream types
- Cargo.toml: pin card_game + klondike git deps to rev 99b49e62

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

solitaire_core/src/lib.rs

@@ -6,8 +6,13 @@ pub mod klondike_adapter;
 pub mod pile;
 pub mod solver;
 
-// Re-export upstream types that cross the solitaire_core API boundary so
-// callers can import from one place without a direct `klondike` / `card_game` dep.
+// Re-export the upstream types that cross the solitaire_core API boundary so
+// downstream crates (engine, wasm) can import from one place without a direct
+// `klondike` / `card_game` dep.
+//
+// `KlondikePileStack`, `SkipCards`, and `TableauStack` are intentionally NOT
+// re-exported — they are only used internally in `klondike_adapter.rs` and do
+// not appear in any public method signature.
 pub use card_game::Session;
 pub use klondike::{Foundation, Klondike, KlondikePile, Tableau};