Phase 0: donor-launch spike foundation

Scaffold CoopAllTheThings: Remote Play Together for any XInput game via a
mirror app under a donor appid (real game keeps its own appid, so DRM,
achievements, and playtime stay intact).

- Build: CMake skeleton, ImGui + SafetyHook submodules (no vcpkg)
- common/: host<->hook IPC contract (seqlock pad state, shared-memory RAII)
- host/: borderless D3D11 window + ImGui overlay listing visible XInput pads,
  behind an InputSource interface (Steam Input slots in later)
- README documents the Phase 0 donor-launch validation procedure, anti-cheat
  limitation, and XInput/bitness constraints

Phase 0 validates the riskiest assumption (Steam RPT streams an arbitrary
window under a donor appid and routes guest input to it) before capture and
injection are built.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

host/src/debug_overlay.hpp

@@ -0,0 +1,13 @@
+#pragma once
+
+#include "input/input_source.hpp"
+
+namespace coop
+{
+
+// Phase 0 overlay: confirms the host is alive and, crucially, shows which
+// controllers are visible -- this is how we verify Remote Play Together is
+// routing a guest's gamepad into our window.
+void draw_debug_overlay(const InputSource& input);
+
+} // namespace coop