fifa17-recon: reconcile authoritative tools with running backend (B)

- Add 8 files present in docker/fifa17-python/tools but missing from the
  top-level tree: fut_accounts.py + 7 test_*.py contracts (all committed in
  the server's docker tree; byte-identical to the running image).
- Preserve newer responder work already matching the running container:
  utas_server.py (offlineSeason), lsx_responder_v2.py (OPENFUT_BIND),
  blaze_responder_v3b.py, autopatch.py, pow_server.py, fut_store.py,
  test_fut_contract.py, fifa17-hook-m1.sh.
- Add 30 newer ghidra_queries (draft purchase/state, SBC 9-26, runtime
  registries). Local tree is now a strict superset of B with all shared
  files byte-identical.

fifa17-recon/tools/ghidra_queries/q_md_sbc_25.py

@@ -0,0 +1,31 @@
+"""Enumerate CardsDLL instructions that write a dword-like value to object +0x1c.
+
+This is intentionally a read-only listing query.  It finds explicit memory writes whose
+rendered destination operand contains displacement 0x1c, then groups them by function.
+"""
+
+listing = prog.getListing()
+seen = set()
+
+for insn in listing.getInstructions(True):
+    text = insn.toString().lower()
+    if "0x1c" not in text and "+1ch" not in text:
+        continue
+    refs = insn.getReferencesFrom()
+    has_write = any(ref.getReferenceType().isWrite() for ref in refs)
+    # Register-relative memory writes do not always produce a Ghidra reference, so retain
+    # the common write mnemonics and require the first rendered operand to contain +0x1c.
+    mnemonic = insn.getMnemonicString().lower()
+    dst = insn.getDefaultOperandRepresentation(0).lower()
+    if "0x1c" not in dst and "+1ch" not in dst:
+        continue
+    if not has_write and mnemonic not in ("mov", "movzx", "and", "or", "xor", "inc", "dec"):
+        continue
+    owner = func(int(insn.getAddress().getOffset()))
+    entry = int(owner.getEntryPoint().getOffset()) if owner else 0
+    key = (entry, int(insn.getAddress().getOffset()))
+    if key in seen:
+        continue
+    seen.add(key)
+    print("%#x function=%#x %s :: %s" %
+          (key[1], entry, owner.getName() if owner else "?", insn.toString()))