fix: web text corruption, blocking-load notice, no-cache dev server

**Most UI text drew with raylib's built-in font, not the loaded one.**
Thirteen call sites used DrawText/MeasureText directly instead of the
project's DrawTextScaled/MeasureTextScaled wrappers, so the cursor and
marker readouts, spectrum panel labels and export toast rendered from
raylib's default bitmap atlas. On desktop that merely looked slightly off;
on web it renders as garbage. The only raw calls left are the two
fallbacks inside the wrappers themselves.

**The rail tooltip held a dangling pointer.** RailButton stored a
TextFormat() result for the deferred draw pass, and raylib documents that
string as expiring once TextFormat has been called a few more times — which
it has by then. It copies into owned storage now.

**Loading a large file in the browser looked like a crash.** The web build
computes its whole STFT in one synchronous pass, with no frame presented in
between, so nothing drawn on the canvas during that window ever reaches the
screen. A notice now goes into the host DOM instead, which the browser
paints independently, and yields once so that paint actually happens before
the work starts. Because that yield unwinds the stack under ASYNCIFY, the
load block is guarded by stftBusy — without it the re-entered main loop
calls ComputeSTFTInit again and frees the STFT the suspended call is still
building.

**Removed EXPORTED_FUNCTIONS from the web link flags.** It replaces
emscripten's default export list rather than extending it, so everything
unnamed is dead-code-eliminated. The upload callback stays reachable via
the EMSCRIPTEN_KEEPALIVE already on its definition.

**Adds serve_web.py**, a dev server that sends no-store. Browsers cache
.wasm hard enough that a plain reload runs a stale module while the page
looks freshly loaded — which makes a rebuild appear to change nothing.
That cost most of a debugging session today: three separate fixes were
tested against a binary that never changed, each returning an identical
fault at an identical address. README now points at it and says why.

Documents the remaining web issue in known_bugs.md: large captures still
corrupt text after loading. Leading theory is ALLOW_MEMORY_GROWTH
reallocating the heap mid-load and invalidating pointers cached across
that moment, which fits the symptom being text specifically.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V8ZWfr5XZyyDttvkhJUgHN

build_web.sh

@@ -90,11 +90,22 @@ done
 # the resources dir at runtime, so the resources@resources preload covers it.
 # INITIAL_MEMORY + ALLOW_MEMORY_GROWTH: the web build now computes the full STFT
 # up front, so the heap must be able to grow for longer recordings.
+# ASYNCIFY_STACK_SIZE: the whole main loop runs under ASYNCIFY, so every yield
+# copies the live C stack into this buffer. The 4 KB default is far too small
+# for a stack that runs through the render/STFT call chain — overflowing it
+# corrupts the heap and surfaces as "memory access out of bounds" at doRewind.
 # EXPORTED_RUNTIME_METHODS: the file-upload path calls back into C from a
 # browser event (ccall), and writes the chosen file into MEMFS (FS). Neither is
 # exported by default in recent emscripten, and omitting them fails only at
 # runtime, when the user clicks "Open file".
-LDFLAGS="-s USE_GLFW=3 -s ASYNCIFY -s INITIAL_MEMORY=67108864 -s ALLOW_MEMORY_GROWTH=1 -s FORCE_FILESYSTEM=1 --preload-file resources@resources --shell-file $SCRIPT_DIR/web_shell.html -s NO_EXIT_RUNTIME=1 -s EXPORTED_RUNTIME_METHODS=ccall,cwrap,FS -s EXPORTED_FUNCTIONS=_main,_rspektrum_upload_done"
+#
+# Do NOT add EXPORTED_FUNCTIONS here. It *replaces* the default export list
+# rather than extending it, so everything unnamed gets dead-code-eliminated —
+# including the ASYNCIFY rewind machinery this build depends on for its blocking
+# main loop. The symptom is a blank canvas after load with "memory access out of
+# bounds" at doRewind. The upload callback stays reachable via
+# EMSCRIPTEN_KEEPALIVE on its definition instead.
+LDFLAGS="-s USE_GLFW=3 -s ASYNCIFY -s INITIAL_MEMORY=67108864 -s ALLOW_MEMORY_GROWTH=1 -s FORCE_FILESYSTEM=1 --preload-file resources@resources --shell-file $SCRIPT_DIR/web_shell.html -s NO_EXIT_RUNTIME=1 -s EXPORTED_RUNTIME_METHODS=ccall,cwrap,FS -s ASYNCIFY_STACK_SIZE=1048576"
 
 if [ "$BUILD_TYPE" = "debug" ]; then
     LDFLAGS="$LDFLAGS -g -O0 -s ASSERTIONS=1"