feat(rules): carried items + real steal transfers, unarmed-disarm auto-pickup

- Combatant.carried_items (APG Steal: non-wielded, non-closely-worn gear),
  loaded from JSON, seeded into CombatantState, exposed in the snapshot.
- _maneuver_steal: success transfers the first carried item victim -> thief
  (logged); empty list keeps the documented nothing-stealable behaviour.
- _maneuver_disarm: unarmed attacker's success auto-picks the dropped weapon
  into its carried_items (SRD Disarm); armed disarms unchanged. Dropped-weapon
  recovery via retrieve_weapon (move action) verified + pinned by tests.
- data/pcs: gear transcribed from Foundry sheet inventories (esha 13,
  jeanne 3, misty 9, nairda 7, oni 6, tammara 20); harvie/ierlieth/
  esha_mount and all monsters empty (no stealable inventory), noted in README.

data/pcs/esha.json

@@ -104,5 +104,21 @@
   ],
   "spells": [
     "Unseen Servant"
+  ],
+  "carried_items": [
+
+    "Arrow",
+    "Blunt Arrow",
+    "Dye Arrow",
+    "Smoke Arrow",
+    "Tangleshot Arrow",
+    "Whistling Arrow",
+    "Thieves' Tools, common",
+    "Clefs de la loge",
+    "Badge d'éclaireur",
+    "Rope",
+    "Pomme",
+    "La pomme de Notch",
+    "Pierre de communication"
   ]
 }