AOT: defer .wasm imports to throw-on-use stubs (shared notice + strict) so the build proceeds #5235

Context: after #5230 (defer dynamic import), compiling opencode's real source reaches a .wasm import — @silvia-odwyer/photon-node/photon_rs_bg.wasm (a transitive image dep). perry reads the .wasm as UTF-8 and hard-fails:

Error: Failed to read .../photon_rs_bg.wasm: stream did not contain valid UTF-8

Proposal (defer, matching #5206/#5230)

When an import resolves to a .wasm file, don't read it as UTF-8/TS. Instead:

• Parse the WebAssembly export section (trivial binary walk: magic+version, section id 7) for export names.
• Synthesize a module that exports each name as a throw-on-call stub (descriptive: wasm module <file> cannot run in an ahead-of-time compiled binary — full .wasm ESM instantiation is #5234). Member calls (wasm.add(...)) throw only if reached.
• Record the site in the shared AOT: compile eval / new Function to a deferred runtime error (with compile-time notice) instead of refusing the build; add strict mode to block #5206/AOT: defer non-resolvable dynamic import() to a runtime error (shared notice + strict), like #5206 #5230 deferred-AOT-site notice; strict mode (perry.strict / a wasm knob) makes it a hard compile error.

Reuse: the text-asset synthesis path (#5223) as the file-handling model, and the deferred-site sink + notice + strict from #5230. Build proceeds; the wasm feature degrades unless reached.

Why

Keeps real apps compiling past peripheral .wasm deps (leaf features), consistent with the eval/dynamic-import deferral policy. Full instantiation that makes the wasm actually run is the companion #5234.

Wall chain: new Function ✅ → @/ ✅ → require ✅ → text ✅ → dynamic import ✅ → .wasm (this: defer; #5234: real).