Introduce bounded FakeTLS terminal phases and handshake-budget backoff handling across native, Java, resources and tools. Adds three new phases (faketls_not_mtproxy_response, faketls_no_server_hello_terminal, faketls_server_closed_terminal) and phase constants. MtProxyProbeCoordinator gains FakeTlsHandshakeBudget state, terminal rules (30s hold, 8s window, max 3 owner attempts, repeated-signature limit 2) and DecisionKind::HandshakeBudgetBackoff. ConnectionSocket computes stable response signatures, publishes terminal observations, and avoids opening TCP when budget backoff applies. Recovery/policy/publisher/diagnostics/phase contract and analyzer/verifier scripts updated; new Tools/check_mtproxy_faketls_budget.py validates behavior. These changes enable durable terminal verdicts for repeated FakeTLS failures while allowing real successes to break the hold.
35bb3ba9a1