Add renderer boundary automation guard

docs/modernization/roadmap.md

@@ -463,9 +463,8 @@ Legacy `Texture2D`, `TextureManager`, `Sampler`, and `RTT` public headers no
 longer expose raw OpenGL enum defaults; default texture formats, sampler
 filters/wraps, and render-target formats are resolved through backend-owned
 overloads.
-The Windows entrypoint now delegates generic OpenGL error-code and info-string
-tokens to `pp_renderer_gl`; WGL context/pixel-format constants remain in the
-platform shell for a later platform-boundary slice.
+The Windows entrypoint now delegates generic OpenGL error-code/info-string
+tokens and WGL core-context/pixel-format attribute catalogs to `pp_renderer_gl`.
 The existing renderer classes are not yet fully
 behind the renderer interfaces.
 
@@ -723,7 +722,7 @@ Results:
   names used by `Shader`, preserves the legacy hash ids, and rejects empty,
   unnamed, null-name, mismatched-hash, and duplicate-name catalogs.
 - PowerShell analyze automation returns JSON summaries and includes the shader
-  validation target.
+  validation target and renderer-boundary guard.
 - `windows-msvc-vcpkg-headless` configured through the Visual Studio bundled
   vcpkg root, installed the manifest dependencies, built the headless component
   matrix, and passed `desktop-fast-vcpkg`.
@@ -738,6 +737,9 @@ Results:
   `out/build/windows-msvc-default/Debug/PanoPainter.exe`.
 - PowerShell build/test automation wrappers return JSON summaries and passed
   local smoke checks.
+- Renderer-boundary automation fails if active non-backend source code
+  reintroduces raw `GL_*`/`WGL_*` constants outside the allowed legacy OpenGL
+  implementation files.
 - PowerShell package-smoke wrapper validates the Windows CMake app executable
   and runtime `data/` copy.
 - Android arm64 configured with NDK 29.0.14206865 through the platform-build