fix(election-iomgr-refactor): Raft election, config decode, and RDHUP chain

- ha.c: self-vote in ha_start_election_async (Raft invariant)
- ha.c: heartbeat_timeout_ms for hb_timeout_thread (not election_timeout_ms)
- ha.c: clear voted_for before RDHUP jitter (stale vote from dead primary)
- ha.c: same-term voted_for check in RDHUP jitter
- config_repl.c/h: use xce_decode for upgradeConfig (capnp extraction before capn_free)
- cluster.c: fix upgradeConfig handler direction (standbys apply, primaries skip)
- cluster.c: remove raw_pkt_copy hack; use req directly
- join.c: push config to newly-joined standbys
- typemap.h/request.h/request.c: raw_sha256/raw_bytes fields for decoded upgradeConfig
- test_ha_failover.c: update heartbeat timeout test to use g_fast_cfg

src/controller/config_repl.h

@@ -115,13 +115,11 @@ int push_config_to_standbys(cluster_t *c, const uint8_t *bytes, size_t blen,
 
 /*
  * handle_upgrade_config: handle an OP_upgradeConfig request from an admin tool.
- * raw_pkt/raw_pkt_sz are the on-wire capnp bytes captured before xce_decode()
- * freed the capnp segment; xce_upgrade_config_req_extract_raw() uses them to
- * recover sha256 and the config blob.
+ * xce_decode() now extracts sha256 + bytes into req->body.upgradeconfigrequestmsg
+ * before freeing the capnp segment, so no raw packet copy is needed.
  * Only callable when CONF_ENABLE_UPGRADE_CONFIG is set.
  */
-int handle_upgrade_config(cluster_t *c, endpoint_t *ep, xce_request_t *req,
-                           const uint8_t *raw_pkt, size_t raw_pkt_sz);
+int handle_upgrade_config(cluster_t *c, endpoint_t *ep, xce_request_t *req);
 
 /*
  * handle_ctrlhello: primary-side handler for OP_hello from a joining standby.