feat(cluster): RFC 010 c6b — handshake on the accept/connect path

Drive the c5 machines as straight-line code on the path (D8): dial_handshake
and accept_handshake do the IO on a shared FramedConn, and a connection actor
is spawned only after a successful handshake. Rejects, tie-break losses (D7),
protocol faults and timeouts are all resolved on the path by closing, so no
actor ever exists for a connection that did not establish. The whole
FramedConn travels into spawn_established, carrying any read-ahead past the
handshake frames.

Handshake deadlines land here rather than in c6c: FramedConn::recv_deadline
enforces them between reads via the connection's fd arm, so a peer that
connects and goes silent cannot wedge the acceptor.

Connection lifetime moves to the manager (pulled forward from c7). The path
registers each established connection and hands over its ConnHandle; the
manager owns it, monitors the actor, and tears the connection down on
Disconnect, on peer close, or at manager shutdown. spawn_established returns
a Pid, so a connection neither outlives nor dies with whichever actor
established it — the ownership that made two-node teardown unorderable.

The manager also tracks in-flight dial intents, monitored so a panicking
dial cannot wedge the tie-break, and answers HelloCtx for the accept path.

src/cluster.rs

@@ -4,10 +4,12 @@
 //! transport trait (control connection), framed codec, and the TCP +
 //! loopback impls. c5: the handshake state machine. c6: the connection
 //! [`manager`] (registry) and per-peer connection actors ([`conn`]), started
-//! as an explicit supervision subtree. Everything above them lands in later
+//! as an explicit supervision subtree, plus the handshake on the
+//! accept/connect path ([`connect`]). Everything above them lands in later
 //! chunks.
 
 pub mod conn;
+pub mod connect;
 pub mod envelope;
 pub mod handshake;
 pub mod manager;
@@ -21,6 +23,7 @@ use crate::scheduler::{sleep, spawn, JoinHandle};
 use crate::supervisor::{ChildSpec, OneForOne, Restart};
 
 pub use conn::{spawn_established, ConnHandle};
+pub use connect::{dial, spawn_acceptor, AcceptorHandle};
 pub use manager::{Manager, MANAGER};
 
 /// A running cluster subtree: an explicitly-started supervisor over the