Adds overview for WIP projects

Promote Ice Climber (JE) and Ice Climber (U) to top-level

- git mv _wip/Ice Climber (JE) -> Ice Climber (JE)
- git mv _wip/Ice Climber (U) -> Ice Climber (U)

- Added header.s / chr.s (one-line .incbin each)
- Added HEADER/PRG/CHR linker.cfg with proper memory layout
- Added copilot/rom.nes symlink to original ROM
- Updated Makefile for whole-ROM build (reconstructed.nes vs rom.nes)
- Updated _tools paths from ../../../_tools/ to ../../_tools/

Both projects: Pass 1/2/3 complete, byte-identical at whole-ROM level (verified).

Root OVERVIEW.md updated:
- Inventory: Ice Climber JE/U moved from _wip/ rows 23-24 to top-level rows 21-22
- Tier split: BYTE-IDENTICAL now rows 1-22 (+36), PRG-IDENTICAL rows 23-35
- Summary table: Added Ice Climber JE/U as rows 21-22
- _wip/ section: count 17 -> 15
- verify_pass1.py scope: 19 -> 22 top-level projects

All 22 top-level projects verified byte-identical.

Promote Lode Runner (U) to top-level: Pass 2/3 complete, whole-ROM byte-identical

- git mv _wip/Lode Runner (U) -> Lode Runner (U)

- Added header.s / chr.s (one-line .incbin each)
- Added HEADER/PRG/CHR linker.cfg with proper memory layout
- Added copilot/rom.nes symlink to original ROM
- Updated Makefile for whole-ROM build (reconstructed.nes vs rom.nes)

Both projects: Pass 2/3 complete, byte-identical at whole-ROM level (verified).

Root OVERVIEW.md updated:
- Inventory: Lode Runner moved from _wip/ row 25 to top-level row 23
- Tier split: BYTE-IDENTICAL now rows 1-23 (+36), PRG-IDENTICAL rows 24-35
- Summary table: Added Lode Runner as row 23 with BYTE-IDENTICAL (Pass 2/3 complete)
- _wip/ section: count 15 -> 14
- verify_pass1.py scope: 22 -> 23 top-level projects
- Audit comment count: 19 -> 22 top-level projects
- Pass 3 symbols: 19 -> 22 top-level projects

All 23 top-level projects verified byte-identical.

TODO.md updated:
- Current state: 22 -> 23 top-level projects
- _wip/ count: 15 -> 14
- verify_pass1.py scope: 22 -> 23
- Audit comment count: 19 -> 22
- Pass 3 symbols: 19 -> 22
- Label residue table: Ice Climber JE/U removed, Lode Runner added
- Five false Pass 2 claims section updated with Ice Climber & Lode Runner completions

Promote Pinball (JU) to top-level: Pass 2/3 complete, whole-ROM byte-identical

- git mv _wip/Pinball (JU) -> Pinball (JU)

- Added header.s / chr.s (one-line .incbin each)
- Added HEADER/PRG/CHR linker.cfg with proper memory layout
- Added copilot/rom.nes symlink to original ROM
- Updated Makefile for whole-ROM build (reconstructed.nes vs rom.nes)

Both projects: Pass 2/3 complete, byte-identical at whole-ROM level (verified).

Root OVERVIEW.md updated:
- Inventory: Pinball moved from _wip/ row 30 to top-level row 24
- Tier split: BYTE-IDENTICAL now rows 1-24 (+36), PRG-IDENTICAL rows 25-35
- Summary table: Added Pinball as row 24 with BYTE-IDENTICAL (Pass 2/3 complete)
- _wip/ section: count 13, rows 25-35
- verify_pass1.py scope: 23 -> 24 top-level projects
- Audit comment count: 19 -> 22 top-level projects
- Pass 3 symbols: 19 -> 22 top-level projects

All 24 top-level projects verified byte-identical.

TODO.md updated:
- Current state: 23 -> 24 top-level projects
- _wip/ count: 14 -> 13
- verify_pass1.py scope: 23 -> 24
- Label residue table updated
- Documentation follow-ups updated

Promote Millipede (U) and Popeye (JU) (PRG 0) to top-level

Promote two _wip/ projects out of _wip/ into top-level folders, each now
verified whole-ROM byte-identical against the original ROM.

- Millipede (U): moves all copilot files up, adds header.s, chr.s,
  linker.cfg with PRG+HEADER+CHR areas, rom.nes copy, and switches the
  Makefile from PRG-only cmp to whole-ROM cmp. Makefile _tools depth
  adjusted (../../../../_tools/ -> ../../_tools/).
- Popeye (JU) (PRG 0): same promotion treatment.
- AGENTS.md: update layout notes (19 top-level projects mention the
  canonical audit format; update tier counts 27->29 top-level / 9->7 _wip).
- OVERVIEW.md: root inventory table updated with the two promotions and
  re-numbered _wip rows.
- TODO.md: handoff updates.
- Remaining _wip projects: assorted pass 2/3 edits (prg.s, locals.inc,
  reconstructed.lbl, reconstructed_prg.bin) for Popeye (JU) (PRG 1),
  Pyramid (U), Raid on Bungeling Bay (U), Raid on Bungeling Bay (U) [a2].

Pinball (JU)/copilot/symbols.inc

@@ -0,0 +1,108 @@
+; =============================================================================
+; Nintendo Entertainment System hardware symbols
+; =============================================================================
+
+; -----------------------------------------------------------------------------
+; PPU registers
+; -----------------------------------------------------------------------------
+
+PPUCTRL             = $2000
+PPUMASK             = $2001
+PPUSTATUS           = $2002
+OAMADDR             = $2003
+OAMDATA             = $2004
+PPUSCROLL           = $2005
+PPUADDR             = $2006
+PPUDATA             = $2007
+
+OAMDMA              = $4014
+
+; -----------------------------------------------------------------------------
+; Controller ports
+;
+; $4016:
+;   Write: controller strobe
+;   Read:  controller port 1
+;
+; $4017:
+;   Read:  controller port 2
+;   Write: APU frame counter
+; -----------------------------------------------------------------------------
+
+JOY1                = $4016
+JOY2                = $4017
+
+; -----------------------------------------------------------------------------
+; APU pulse channel 1
+; -----------------------------------------------------------------------------
+
+APUPULSE1CTRL       = $4000
+APUPULSE1SWEEP      = $4001
+APUPULSE1TIMERLO    = $4002
+APUPULSE1TIMERHI    = $4003
+
+; -----------------------------------------------------------------------------
+; APU pulse channel 2
+; -----------------------------------------------------------------------------
+
+APUPULSE2CTRL       = $4004
+APUPULSE2SWEEP      = $4005
+APUPULSE2TIMERLO    = $4006
+APUPULSE2TIMERHI    = $4007
+
+; -----------------------------------------------------------------------------
+; APU triangle channel
+; -----------------------------------------------------------------------------
+
+APUTRIANGLECTRL     = $4008
+APUTRIANGLETIMERLO  = $400A
+APUTRIANGLETIMERHI  = $400B
+
+; -----------------------------------------------------------------------------
+; APU noise channel
+; -----------------------------------------------------------------------------
+
+APUNOISECTRL        = $400C
+APUNOISEPERIOD      = $400E
+APUNOISELENGTH      = $400F
+
+; -----------------------------------------------------------------------------
+; APU DMC channel
+; -----------------------------------------------------------------------------
+
+APUDMCCTRL          = $4010
+APUDMCDIRECT        = $4011
+APUDMCADDR          = $4012
+APUDMCLENGTH        = $4013
+
+; -----------------------------------------------------------------------------
+; APU status and frame counter
+;
+; $4015:
+;   Write: enable or disable the five APU channels
+;   Read:  channel and interrupt status
+;
+; $4017:
+;   Write: APU frame-counter mode and IRQ inhibit
+;   Read:  controller port 2
+; -----------------------------------------------------------------------------
+
+APUSTATUS           = $4015
+APUFRAMECOUNTER     = $4017
+
+; -----------------------------------------------------------------------------
+; Controller masks
+; -----------------------------------------------------------------------------
+
+PAD_RIGHT           = $01
+PAD_LEFT            = $02
+PAD_DOWN            = $04
+PAD_UP              = $08
+PAD_START           = $10
+PAD_SELECT          = $20
+PAD_B               = $40
+PAD_A               = $80
+
+PAD_HORIZONTAL      = PAD_LEFT | PAD_RIGHT
+PAD_VERTICAL        = PAD_UP | PAD_DOWN
+PAD_DPAD            = PAD_HORIZONTAL | PAD_VERTICAL