DVD vob_start absolute rebase + rc.5.3 audit fixes

- ifo.rs: rebase VTS title VOBS to absolute disc LBA (file_start_lba +
  vtstt_vobs); fixes DVD rips opening on the menu region instead of the
  movie (e.g. SOTL). Adds absolute-placement regression test.
- aacs/boil.rs: add mk_from_pk primitive (PK -> MK via MKB walk).
- dvdnav/: nav-VM command decoder + start-cell resolver seam, parked
  behind USE_NAV_RESOLVER (kept compiled, never executed).
- mux: FVI src.byte within-sector per spec; Unknown colour -> CICP
  unspecified (2,2,2,1); demux clear PCS -> NORMAL; ts.rs feed() base
  reset + boundary provenance fix.
- Assorted audit fixes (doc/comment/test accuracy) across the crate.

src/mux/codec/coding.rs

@@ -181,8 +181,13 @@ impl PictureInfo {
         match self.detail {
             CodingDetail::Mpeg2(m) => {
                 if !m.frame_picture {
-                    // A single field picture is inherently interlaced; the
-                    // top_field_first bit names which field this picture is.
+                    // A single field picture is inherently interlaced. Which
+                    // field it actually codes is given by picture_structure
+                    // (top/bottom), not by top_field_first — §6.3.10 constrains
+                    // top_field_first to 0 for field pictures, so it is not the
+                    // spec source here. picture_structure is not retained on
+                    // this carrier, so top_field_first is used only as the lone
+                    // field hint available (best-effort, not spec-derived).
                     Some(if m.top_field_first {
                         FieldOrder::Tff
                     } else {
@@ -203,8 +208,10 @@ impl PictureInfo {
     /// Number of field-display periods this picture occupies — the basis for
     /// soft-telecine (2:3 pulldown) timing. MPEG-2 (ISO/IEC 13818-2 §6.3.10,
     /// ffmpeg `nb_fields = repeat_pict + 2`): a field picture occupies 1 field,
-    /// a normal frame 2, a `repeat_first_field` frame 3 (or 4/6 in a progressive
-    /// sequence). Codecs without pulldown signalling report the normal 2 fields.
+    /// a normal frame 2, a `repeat_first_field` progressive-frame 3 (or 4/6 in a
+    /// progressive sequence); an rff bit on a non-progressive interlaced frame is
+    /// spec-forbidden (§6.3.10) and is treated as 2. Codecs without pulldown
+    /// signalling report the normal 2 fields.
     pub fn nb_fields(&self) -> u8 {
         match self.detail {
             CodingDetail::Mpeg2(m) => {

src/mux/codec/h264.rs

@@ -325,7 +325,8 @@ impl CodecParser for H264Parser {
 }
 
 /// Parse `(chroma_format_idc, bit_depth_luma_minus8, bit_depth_chroma_minus8)` from
-/// a High-Profile SPS NAL (profile_idc ∈ {100, 110, 122, 144}).
+/// a High-Profile SPS NAL (profile_idc ∈ `HIGH_PROFILES` — the 14 chroma/bit-depth
+/// extended profiles `codec_private` invokes this for).
 ///
 /// SPS RBSP layout (ITU-T H.264 §7.3.2.1.1) up to the fields we need:
 ///   byte 0        NAL header (already known to be type 7)

src/mux/codec/hevc.rs

@@ -56,10 +56,7 @@ fn hevc_num_extra_slice_header_bits(pps_nal: &[u8]) -> Option<u32> {
     br.read_ue()?; // pps_pic_parameter_set_id
     br.read_ue()?; // pps_seq_parameter_set_id
     br.skip_bits(2)?; // dependent_slice_segments_enabled_flag, output_flag_present_flag
-    let mut n = 0u32;
-    for _ in 0..3 {
-        n = (n << 1) | br.read_bit()?;
-    }
+    let n = br.read_bits(3)?;
     Some(n)
 }