[KeyffMS]

R2j

Small move/visibility-only continuation of #83 R2.

Scope:

• move only the read-only ApplicationState::selected_profile and ApplicationState::profile_candidates helpers from application.rs into the existing application/state.rs;
• expose them only as pub(super) so the existing sibling connection.rs reducer can keep calling the same helpers;
• keep exactly one public ApplicationState definition and the top-level ApplicationState::reduce in application.rs.

Safety/architecture:

• no reducer logic or behavior changed;
• write/restore exact operator-confirmation comparisons remain unchanged in application.rs and directly covered by the existing architecture gate;
• no session/write authority, scheduler/budget/fairness/QueueFull, filesystem boundary, or conformance semantics changed;
• no gate/test weakening.

Refs #83