feat(deck-builder): /deck_code mint + /deck resolve with 3-min in-memory TTL

Adds the portal pair (shadowverse-portal.com deck-builder endpoints) as
anonymous routes on the app server. The translation middleware learns a new
[NoWireEncryption] attribute that skips both AES calls but keeps the rest of
the msgpack + base64 + envelope pipeline intact, matching prod's portal wire
profile observed in data_dumps/traffic_prod_deckcode.ndjson.

Storage is a 3-minute IMemoryCache — codes are anonymous-global, 4-char
lowercase alphanumeric (matches the shortest prod sample). Foil bit is
stripped on mint to match prod's normalize-on-encode behaviour.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

SVSim.EmulatedEntrypoint/Program.cs

@@ -102,6 +102,11 @@ public class Program
         builder.Services.AddSingleton<IRandom, SystemRandom>();
         builder.Services.AddSingleton<PuzzleMissionEvaluator>();
 
+        // Deck-code mint/resolve uses IMemoryCache for ephemeral (3-min TTL) storage; no DB
+        // row, no migration. Singleton because the cache + RNG seam are process-wide.
+        builder.Services.AddMemoryCache();
+        builder.Services.AddSingleton<IDeckCodeService, DeckCodeService>();
+
         #endregion
 
         builder.Services.AddTransient<ShadowverseTranslationMiddleware>();