fix(view): each Add dialog offers only its own kind of module

Item 1 of #38 (closed).

• Add device… lists Bench.installed_devices(): it leaves out a module that says it is an experiment (module_type) or that the fleet declares as one.
• Add experiment… lists installed_experiments(loaded=True): the Create run filter plus folders loaded on this machine.
• A module whose kind is unknown stays offered in both.
• Tests at the presenter and window level; each fails without the fix.

First commit: pillow 13.0.0, brotli 1.2.1 and certifi 2026.10.23 in the lockfile. New advisories (gate 10) blocked every push to the line. These are dev/installer-build dependencies only.

0.3 is not affected: it installs device modules only. After merge, maintain/0.4 is merged up into exp. Ships with 0.4.5.

Refs #38 (closed)