feat: scaffold fifa-blaze Blaze protocol emulator (Milestone 1)

Two-crate workspace: blaze-proto (Fire2 framing via tokio_util codec,
tdf=0.1 for TDF decode/stringify) and server (TLS listeners for
redirector + Blaze, JSONL capture with TdfStringifier, pluggable
FramingVariant enum).

Both listeners bind on startup and write a capture JSONL for every
packet. Component/command IDs are unknown — captures reveal them.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

config.example.toml

@@ -0,0 +1,20 @@
+[redirector]
+# EA clients connect to gosredirector.ea.com — point that hostname to 127.0.0.1
+# in /etc/hosts (or via the openfut-hook DLL), and the redirector listens here.
+listen = "0.0.0.0:42127"
+
+[blaze]
+listen          = "0.0.0.0:10041"
+advertise_host  = "127.0.0.1"   # IP/hostname we tell the client to connect to
+advertise_port  = 10041
+
+[tls]
+# Generate with: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem
+# -days 3650 -nodes -subj "/CN=gosredirector.ea.com"
+# DirtySDK rejects ECDSA — RSA-2048 required.
+cert = "certs/cert.pem"
+key  = "certs/key.pem"
+
+[capture]
+dir          = "captures"
+pretty_print = true