Add headless recording renderer api

docs/modernization/build-inventory.md

@@ -241,6 +241,9 @@ Known local toolchain state:
   renderer-boundary guard that reports JSON and fails if active non-backend
   source code reintroduces raw `GL_*`/`WGL_*` constants outside the allowed
   legacy OpenGL implementation files.
+- `pp_renderer_api` exposes a headless `RecordingRenderDevice` that validates
+  command order, records render commands, and records trace markers without a
+  window or GL context.
 - `pp_ui_core` consumes vcpkg tinyxml2 only when `PP_USE_VCPKG_TINYXML2=ON`
   through the vcpkg preset; default and Android validation still use the
   retained vendored fallback tracked by DEBT-0012.

docs/modernization/roadmap.md

@@ -740,6 +740,9 @@ Results:
 - Renderer-boundary automation fails if active non-backend source code
   reintroduces raw `GL_*`/`WGL_*` constants outside the allowed legacy OpenGL
   implementation files.
+- `pp_renderer_api` now includes a headless `RecordingRenderDevice` with strict
+  command-order validation and command/trace capture, giving automation a
+  backend-neutral render path that does not require a window or GL context.
 - PowerShell package-smoke wrapper validates the Windows CMake app executable
   and runtime `data/` copy.
 - Android arm64 configured with NDK 29.0.14206865 through the platform-build