Media acceptance

Tests keep MediaMTX behind process and control interfaces. They verify that the credential-bearing MediaMTX control request is localhost-only and transient, never returned or persisted by Sense, and no process starts before an explicit reconcile. Real MediaMTX binary, camera pull, reader counts and crash recovery require the deployment lab.