keys: read damage is never a key failure; legacy key API removed

Damaged AACS units are holed, blanked and counted on every path instead
of stopping with E7013; failed batch partners fall back to side reads
and a wrong FMTS key is judged per key. ResolvedKeySet is the only AACS
decrypt door; a raw whole-disc reader never decrypts and refuses titles
with no stream folder (E6003) or a piece no held key opens (E7032).

Cargo.lock

@@ -324,6 +324,7 @@ dependencies = [
  "crossbeam-channel",
  "freemkv-unlock",
  "libc",
+ "libfreemkv",
  "loom",
  "memchr",
  "rayon",