Fix UAT release blockers and prepare firmware 1.3.3 RC

[BrettKinny]

Summary

• fixes PiVoice tool routing, JSON input normalization, tool telemetry, emoji enforcement, and live Kid Mode refresh
• restores dashboard state accuracy and updates the OpenRouter vision model default
• fixes conservative Dotty ASR correction and server-owned dance lifecycle/state races
• pins StackChan firmware 1.3.3 with exclusive dance motion ownership and balanced IMU lock accounting
• makes the UAT slicer support instantaneous event markers
• updates live-path documentation and regression coverage

Root causes

The July 11 UAT exposed several independent issues: prompt constraints steered the 4B model away from tools; PiVoice trusted emoji prompt compliance; dashboard state was hardcoded; Kid Mode was snapshotted at startup; the VLM default referenced a removed model; dance never entered its state and used incorrect LED argument names; server and firmware dance choreographies competed for servo ownership; and instantaneous UAT timestamps were rejected by the slicer.

Validation

• Ruff: clean
• main + PiVoice Python suite: 159 passed, 11 subtests
• dotty-behaviour suite: 231 passed
• combined coverage: 70.03% (56% required)
• dotty-pi-ext npm suite: passed
• firmware ownership tests: 4 passed
• clean ESP-IDF 5.5.4 firmware build: 5,239,824 bytes; 134,128 bytes / 2.50% partition headroom
• 13 generated UAT clips decode successfully

Remaining RC bench gates

• verify memory and think_hard tool calls against the live Pi model/runtime
• verify dashboard state and Kid Mode next-turn refresh
• verify named dance motion/LED ownership and security sweep with serial HEADMOVE/lock logging
• OTA/install smoke for firmware 1.3.3

Closes none automatically; UAT issues remain open until live RC verification.