Port the sketch layer work from snaporca: offset chains, right-click, MCP verbs

Carries snaporca 971320e129, 6b049f0dc6, 4aae782029, 444d59f212, 74cf3d7e54 and the build
guards from 597557a6e4. Parity re-verified after every hunk: 17 files identical, 8 diverging by
their expected counts — DesignPanel.cpp still 32, DesignCanvas.cpp still 16, which is the proof
each hunk landed on the right side rather than being copied over a real divergence.

OFFSET OFFSETS THE CHAIN. Per-entity offsetting returned a closed rectangle as four parallel
segments that no longer touch, so entities_to_wires gave four OPEN wires and nothing could be
extruded. offset_entities now chains by shared endpoints and repairs each seam by mitering the
neighbours to their intersection. Second bug, invisible to any single-entity test: +d meant
"left of travel" for a line but "radius + d" for an arc regardless of sweep, so a slot outline
offset with its straights going one way and its caps the other. The convention is now written on
the declaration and pinned by a test.

tests/libslic3r/test_sketchprofile.cpp is new and asserts the LOOP rather than coordinates —
the property that decides whether a profile can be built, and the one the existing single-entity
[SketchEdit] cases cannot see. Its include is catch2/catch_all.hpp here: this fork ships Catch2
v3 while snaporca is on v2, which is why the test files are a tolerated divergence.

RIGHT-CLICK PICKS WHAT YOU POINTED AT, so a line's own verbs are offered instead of the
empty-selection vocabulary; sk_delete stops sharing btn:delete with the feature tree; and an
element's defining number (length / radius / diameter / angle / distance) can be typed, from the
menu or from V.

TWELVE MCP SKETCH VERBS. The socket had ~40 verbs and none touched a sketch, so the 2D layer
could only be exercised by driving a GUI with synthetic clicks. sketch_describe reports each
closed loop, the loops it encloses as voids, exact areas, and where a chain is still open;
sketch_validate/sketch_heal are FreeCAD's ValidateSketch — find vertices that overlap within a
tolerance but carry no coincidence, then weld them AND record the constraint, so a loop closed
by floating-point luck becomes one closed by construction. scripts/mcp-sketch-smoke.py is the
loop that asserts all of it.

Kernel suite on this fork: all tests passed, 2677 assertions in 230 test cases. The GUI target
links against the rebuilt deps image (the wxInspector blockage is gone) and the binary carries
the new verbs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

scripts/kernel-test.sh

@@ -87,7 +87,31 @@ fi
 # tests/ is mounted too -- unlike docker-iter-build.sh, this script exists precisely to
 # compile tests being edited. CMakeLists.txt and cmake/ carry the SLIC3R_CAD gate; taking
 # them from the baked image instead leaves the gate off and the CAD symbols vanish.
+
+# ---- OOM guard (2026-08-21) -------------------------------------------------------------
+# Two of these builds ran at once on 2026-08-21, each with ninja -j$(nproc)=16: ~36 cc1plus
+# holding 42 GB of a 62 GB box -> global OOM at 21:05, a 2h28m kill storm, ssh unreachable,
+# lightdm destroyed. Neither build produced a single object. scripts/rig-build.sh grew the
+# bounds first; every script that starts a compile needs the same three, or the guard is only
+# as strong as the script you happened not to use.
+#   flock    — the lock path is SHARED with rig-build.sh and the other fork on purpose, so
+#              concurrent builds serialise instead of summing.
+#   -j       — bounded parallelism; ~1.17 GB per cc1plus was the measured average.
+#   --memory — the actual guarantee: a runaway build dies in its own cgroup instead of taking
+#              the host down. --memory-swap equal to --memory forbids swap, which is what made
+#              ssh hang.
+JOBS="${JOBS:-12}"
+MEM="${MEM:-40g}"
+LOCK=/tmp/orca-rig-build.lock
+
+exec 9>"$LOCK"
+if ! flock -n 9; then
+    echo "another build holds $LOCK — waiting (this is the OOM guard, not a hang)"
+    flock 9
+fi
+
 docker run --rm \
+  --memory="$MEM" --memory-swap="$MEM" \
   -v "$REPO/src":/OrcaSlicer/src \
   -v "$REPO/tests":/OrcaSlicer/tests \
   -v "$REPO/resources":/OrcaSlicer/resources \
@@ -121,5 +145,5 @@ docker run --rm \
     # src/CMakeLists.txt:92 while nothing about the kernel had changed. Turning the block off is
     # not a workaround for that one dependency; it is the kernel suite finally declaring what it
     # actually needs, so the next GUI-side dependency upstream adds cannot break it either.
-    cmake --build build --config Release --target libslic3r_tests
+    cmake --build build --config Release --target libslic3r_tests -- -j$JOBS
     ./build/tests/libslic3r/Release/libslic3r_tests '$TAGS' --order decl"