fix: edit ops review findings

From the review of 7723711:
- The assembler is locked: a client closed for a full queue is closed
  by the task that was sending, loop(), whose disconnect dropped the
  buffer while async_tcp could be copying into it. A whole message is
  taken out of it, so a disconnect can't free it while it is read.
- loop() expires a message stalled for 10 s, freeing its buffer and
  telling its client, instead of holding it until another client came.
  A binary message is refused before it can touch another's buffer.
- Each edit takes only the fields its route reads; one it would ignore
  is refused by name. linkRemote's rolling code goes in under the
  route's name, so applyModelEdit is unchanged again.
- An edit refused for an id that doesn't exist replies not found
  (edit_result_t::missing). A reply that doesn't fit its buffer goes
  as an internal error, so the op still gets one.
- The TYPE table says what becomes of each op (proto_op_t), which the
  socket switches on. The reply address is one proto_reply_to_t. The
  routes and the ops start and queue an edit the same way
  (newModelEdit, submitModelEdit). The full-list texts and the offered
  remote address rule live in ModelEditor.
- e2e: the sort order test skips a list that it would renumber.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/LoopQueue.h

@@ -2,6 +2,7 @@
 #define LOOP_QUEUE_H
 #include <stdint.h>
 #include "ShadeRequests.h"
+#include "ProtoFrame.h"
 
 // The one queue through which other tasks hand work to loop(), which alone
 // changes the shade model (docs/adr/0002-loop-task-is-the-only-writer-of-the-shade-model.md).
@@ -34,12 +35,11 @@ struct loop_item_t {
   uint8_t restoreParts = 0;       // restore_shades: RESTORE_* bits
   uint8_t slot = 0;               // snapshot_fill: the SnapshotSlots slot
   model_edit_t *edit = nullptr;   // model_edit: loop() runs and frees it
-  // shade_request and proto_read from a protocol 2 client: loop() replies to
-  // this socket client with replyId once it has run.  0 for no reply.
-  uint32_t replyClient = 0;
-  uint32_t replyId = 0;
+  // shade_request and proto_read from a protocol 2 client: loop() replies
+  // once it has run.
+  proto_reply_to_t replyTo;
   uint8_t readOp = 0;             // proto_read: the op's type
-  uint8_t readId = 0;             // proto_read: the group, for groupOptions
+  uint8_t groupId = 0;            // proto_read: groupOptions' group
 };
 
 // Whether the item sends anything on air.