feat(rules): carried items + real steal transfers, unarmed-disarm auto-pickup

- Combatant.carried_items (APG Steal: non-wielded, non-closely-worn gear),
  loaded from JSON, seeded into CombatantState, exposed in the snapshot.
- _maneuver_steal: success transfers the first carried item victim -> thief
  (logged); empty list keeps the documented nothing-stealable behaviour.
- _maneuver_disarm: unarmed attacker's success auto-picks the dropped weapon
  into its carried_items (SRD Disarm); armed disarms unchanged. Dropped-weapon
  recovery via retrieve_weapon (move action) verified + pinned by tests.
- data/pcs: gear transcribed from Foundry sheet inventories (esha 13,
  jeanne 3, misty 9, nairda 7, oni 6, tammara 20); harvie/ierlieth/
  esha_mount and all monsters empty (no stealable inventory), noted in README.

data/pcs/oni.json

@@ -126,5 +126,14 @@
   "Delay Poison",
   "Ironskin",
   "Restoration, Lesser"
- ]
+ ],
+  "carried_items": [
+
+    "Arrow",
+    "Holy symbol (Wood)",
+    "Clefs de la loge",
+    "Eh je suis Éclaireuse maintenant",
+    "Kit, Fishing",
+    "Alchemist's Fire"
+  ]
 }