Keep the live view connect bound armed until ICE connects

[robertjamesprior]

Summary

oniceconnectionstatechange cleared the connect bound on ICE checking, but onConnected — and KERNEL_CONNECTED — wait for connected. So a peer that reached checking and then stalled had no timer watching and reported nothing: the silent black frame #417 exists to remove, in the one stretch of the connect the bounds don't cover.

Leaving the bound armed costs nothing on the healthy path. ICE reaches connected tens of milliseconds after checking, inside the same 2s media budget, and onConnected clears it either way. reason stays media, whose meaning widens to "the peer never got past ICE checking".

Stacked on #417 — retarget to main once that lands.

Not in this PR: the mid-session stall, where media drops after playback started. That needs a frame-progress signal, and the client's peer path has no access to the media element — it lives in components/video.vue — so it belongs in the video layer rather than base.ts. Separate change.

Testing

bun test tests: 39 pass, 0 fail. tsc --noEmit clean. Two tests replace one: checking leaves the bound armed and reports media when it stalls, and connected clears it.

[robertjamesprior]

Folded into #417, which is now the single PR for the whole connect bound. Cherry-picked as 3c72c24 onto the #417 branch — same content, no changes.

Why folded rather than landed second: this PR's base was #417's tip, and this repo only allows squash merges, so merging #417 first would have left this diff carrying #417's commits until someone rebased it. Both also touch the same function that Sayan's outstanding #417 review is about, so one review covers both.

Verified on the combined head: bun test tests in images/chromium-headful/client is 39 pass / 0 fail — the two new cases here replace the single "checking clears the bound" case — and tsc --noEmit is clean. The media row in #417's reason table now reads connected, and the matching line in kernel/docs#635 will be corrected with this release rather than left describing checking.

Branch hypeship/live-view-bound-until-connected left in place in case anything here needs re-reading.