fix(election-iomgr-refactor): Raft election, config decode, and RDHUP chain

- ha.c: self-vote in ha_start_election_async (Raft invariant)
- ha.c: heartbeat_timeout_ms for hb_timeout_thread (not election_timeout_ms)
- ha.c: clear voted_for before RDHUP jitter (stale vote from dead primary)
- ha.c: same-term voted_for check in RDHUP jitter
- config_repl.c/h: use xce_decode for upgradeConfig (capnp extraction before capn_free)
- cluster.c: fix upgradeConfig handler direction (standbys apply, primaries skip)
- cluster.c: remove raw_pkt_copy hack; use req directly
- join.c: push config to newly-joined standbys
- typemap.h/request.h/request.c: raw_sha256/raw_bytes fields for decoded upgradeConfig
- test_ha_failover.c: update heartbeat timeout test to use g_fast_cfg

src/include/request.h

@@ -104,10 +104,19 @@ extern int xce_replconfig_reply_ssl_decode(SSL *ssl,
                                             size_t   *out_len);
 
 /*
- * xce_upgrade_config_req_extract: extract bytes from a decoded
- * OP_upgradeConfig request.  Returns -ENOTSUP — see request.c
- * for the architectural finding.  Use xce_upgrade_config_req_extract_raw
- * with the raw packet buffer instead.
+ * xce_free_request: free an xce_request_t and all owned sub-fields,
+ * including the raw_sha256/raw_bytes fields on upgrade_config_req_t
+ * that the generated free_Request() does not know about.
+ * Use this everywhere instead of calling free_Request() directly.
+ */
+extern void xce_free_request(xce_request_t *req);
+
+/*
+ * xce_upgrade_config_req_extract: extract sha256 + bytes from a decoded
+ * OP_upgradeConfig request.  xce_decode() stores malloc'd copies in
+ * req->body.upgradeconfigrequestmsg->raw_sha256 / raw_bytes before
+ * capn_free() runs.  Returns shallow pointers (owned by req); caller
+ * must NOT free them.  Returns -EINVAL if fields are missing.
  */
 extern int xce_upgrade_config_req_extract(const xce_request_t *req,
                                            uint8_t **out_bytes,