FlexGlue: bound concurrent GPU inferences with a semaphore - #4969

## Summary

Bring in upstream's shared FlexGlue workers and bounded GPU inference slots. CPU preprocessing can overlap while inference concurrency stays independently configurable within each worker group. Preserve the fork's deferred matching-result replacement and CUDA output regression.

## Changes

- Merge the ONNX inference limiter, shared model ownership, worker/inference options and bindings.
- Keep both upstream limiter tests and the existing dynamic-shape CUDA regression when resolving onnx_test.cc.
- Give the setup-failure regression an explicit missing matcher path when model downloads are disabled, so it reaches the intended descriptor-loading error.
- Regressions cover limiter capacity/release, option bounds, worker setup errors and preservation of existing matching results on failure.

## Upstream commits

- df19970 - FlexGlue: share one matcher across multiple worker threads per GPU (colmap#4957)
- 3c1a1b9 - FlexGlue: bound concurrent GPU inferences with a semaphore (colmap#4969)

## Validation

- 42 focused native tests passed without skips: 14 ONNX, 2 FlexGlue option and 26 matching/controller cases. CUDA EP initialization occurred inside the GPU setup-error case; the dynamic-shape CUDA output regression passed.
- clang-tidy-18 completed for six affected production/test translation units with no displayed source diagnostics; generated/header warnings were suppressed. Diff and added-line formatting checks passed.
- Incremental qualification reused 47 production objects and 13 private archives; seven remaining translation units compiled and the CLI linked. Link/provider checks and five help/version smokes passed. The exported-source version reports Unknown commit/date.
- Real FlexGlue model inference, Python and Windows are not qualified by these checks.

AI disclosure: Totally vibe coded