Streaming script-token decoding shared by Editor::feed_text and headless. Unknown tokens stay literal, and a lone ‘<’ never fabricates a closing ‘>’.