F8 READ-PATH bank switching landed (any access to $1FF8/$1FF9 now flips the bank, matching hardware

Two changes landed (emitter_c.py): (1) HARDWARE-CORRECTNESS — addr_map_read now flips reforge_active_bank on ANY read of $1FF8/$1FF9 (LDA/BIT/data fetches), where Finding 36 had implemented only the write path; the bank flips before the byte fetch so the returned byte comes from the newly selected bank. Affects only F8 ROMs (rom_size > 0x1000); Asteroids is the corpus' only F8 cart.

Raw traces, ROM material, local paths, and personal data are not part of this public record.