Add Ctrl+Z/Ctrl+Y undo/redo with command-based network sync

Pointer-based per-painter history of the canonical maps with copy-on-write
sharing (only maps touched by a stroke are cloned). A stroke (press..release)
is one step; a Load resets the history to the loaded maps as the sole baseline.

Network sync replicates undo/redo as tiny checkpoint/restore commands instead
of broadcasting full map snapshots: every peer runs the same COW history keyed
by owner-assigned checkpoint ids and reproduces restores locally. A peer that
cannot reproduce a target (undo across its join boundary) requests a targeted
snapshot from the owner as fallback.

Hardening: ordered send FIFO keeps stamps + checkpoints + restores in
production order (a marker never overtakes the stamps it finalizes); stamp
overflow carries over to the next frame instead of being decimated, so remote
content matches the owner; remote always inserts the checkpoint id to stay
1:1 aligned. Owner-authoritative snapshot fallback replaces the silent
host no-op. Adds a logSync toggle (default on) tracing when each
checkpoint/restore/snapshot is sent, applied, or falls back.

Also includes paintings-panel layout tuning in PaintHudPanel.prefab
(inspector edits).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Assets/Scripts/MeshPainter.Persistence.cs

@@ -121,10 +121,11 @@ public partial class MeshPainter
 
         // Re-seed exactly like SwitchBackend / ApplyPaintSnapshot, so the island/dilation seeding path
         // runs and the edge padding is rebuilt correctly for the loaded content.
-        if (_gpuActive) TeardownGpu();
-        else TeardownCpu();
-        SetupBackend(useGpu, canonical);
-        _hasLastScreen = false;
+        ReseedCanonical(canonical);
+
+        // A load replaces the whole painting and is NOT undoable: the loaded maps become the new history
+        // baseline, clearing any prior undo/redo. Peers reset to the same baseline via the load broadcast.
+        ResetHistoryToCurrent(canonical);
         return true;
     }