feat(rules): carried items + real steal transfers, unarmed-disarm auto-pickup

- Combatant.carried_items (APG Steal: non-wielded, non-closely-worn gear),
  loaded from JSON, seeded into CombatantState, exposed in the snapshot.
- _maneuver_steal: success transfers the first carried item victim -> thief
  (logged); empty list keeps the documented nothing-stealable behaviour.
- _maneuver_disarm: unarmed attacker's success auto-picks the dropped weapon
  into its carried_items (SRD Disarm); armed disarms unchanged. Dropped-weapon
  recovery via retrieve_weapon (move action) verified + pinned by tests.
- data/pcs: gear transcribed from Foundry sheet inventories (esha 13,
  jeanne 3, misty 9, nairda 7, oni 6, tammara 20); harvie/ierlieth/
  esha_mount and all monsters empty (no stealable inventory), noted in README.

data/pcs/tammara.json

@@ -206,5 +206,28 @@
     "Delay Poison",
     "Aid",
     "Drunkard's Breath"
+  ],
+  "carried_items": [
+
+    "Mess Kit",
+    "Gunsmith's Kit",
+    "Holy symbol (Wood)",
+    "Spell component pouch",
+    "Powder horn",
+    "Firearm Bullet",
+    "Alchemical Cartridge (Paper, Bullet Or Pellet)",
+    "Black Powder (Dose)",
+    "Matériaux pour munitions",
+    "Rope",
+    "Bouteille d'alcool (poste des bandits)",
+    "Clefs de la loge (4)",
+    "Black Powder (Dose) en stock",
+    "Firearm Bullet en stock",
+    "Alchemical Cartridge (Paper, Bullet Or Pellet) en stock",
+    "Alcool de poison d'araignée ogre",
+    "Badge des éclaireurs",
+    "Bouteille d'alcool fort (genre plus que du désinfectant)",
+    "Une médaille de Caiden Cailean",
+    "Potion of Cure Light Wounds"
   ]
 }