feat: lives and death move to the new domain (commit C of the swap)

fixes the regression commit B introduced: coins and skills lived in the
Attempt ledger, but nothing discarded it, because LivesStateHandler still
called the old store and HandlePlayerDeath was never invoked. Dying kept
everything earned that level. Discard-on-death is the ledger's purpose,
so it could not be separated from it.

new AttemptFailed(remaining, runOver) event, raised after the life is
spent and the ledger discarded. DeathScreen and GameOverScreen react to
that instead of being wired to HealthComponent.Death by scene connections
which fired *before* the life was charged - on the last life game-over
saw one life left and showed nothing, then the death screen saw zero and
refused to reload. 18 scene connections deleted; the race is now
unrepresentable rather than fixed.

DeathScreen also had two read paths for lives - a signal and a direct
store read - because neither was reliable alone. Now one.

Hud reads both facts from signals; only health still polls, and that
belongs to the component rather than to progression. GameManager no
longer touches GameStateStore or SaveSystem at all.

progression/ProgressionService.cs

@@ -246,10 +246,13 @@ public sealed class ProgressionService
 
         if (!_playthrough.SettleDeath(_attempt)) return;
 
-        // The ledger was discarded, so it must stop contributing to TotalCoins.
+        // The ledger was discarded, so it must stop contributing to TotalCoins or to owned skills.
         _attempt = null;
         _playthroughs.Save(_playthrough);
         AnnounceChanges();
+
+        // Announced last, once lives and the discard have both landed.
+        _events.Raise(new AttemptFailed(_playthrough.Lives, _playthrough.IsRunOver));
     }
 
     /// <summary>