Add native Crystal exploration port and reference tooling

scripts/check-vendor.mjs

@@ -0,0 +1,21 @@
+import { createHash } from "node:crypto";
+import { readFileSync, readdirSync } from "node:fs";
+
+const expected = {
+  LICENSE: "5a7b61a51a5efb789721b3480b502f324094911aeca46937956c561b52638009",
+  "binjgb.js":
+    "a68e5854b5d68339a34c0aa0b6dbeacd615ed316657ee17b63dafa5e00561b09",
+  "binjgb.wasm":
+    "52c165069441a09180b4bd63464318aa7b861b1d36e0d05e8047b48619fd2f0b",
+};
+for (const [name, hash] of Object.entries(expected)) {
+  const actual = createHash("sha256")
+    .update(readFileSync(`reference/public/vendor/binjgb/${name}`))
+    .digest("hex");
+  if (actual !== hash) throw new Error(`Vendor integrity mismatch: ${name}`);
+}
+for (const path of readdirSync("public", { recursive: true })) {
+  if (/\.(gbc?|rom|sav|zip)$/i.test(path))
+    throw new Error(`Game data must not be shipped: ${path}`);
+}
+console.log("Pinned emulator integrity and public game-file checks passed.");