feat(kernel): expand stock image, boot policy, and ecosystem integration

- Stock kernel: boot.policy v2 (maxExecLineDepth, denyEnvKeys, requireProcNodes);
  richer BARE_OS_KERNEL_SELFTEST; example policy and timer drop-in samples
- Protocol: feature bits 28–30, seed RPCs (manifest_hints, peer_health, staging_slot)
- Booter: /proc mirrors, provenance, metrics_live, pear IPC registry, initd DAG,
  suspend/resume wiring, exec budget, shell ${var} expansion, delegate limits,
  telemetry v3 / OTel JSONL, ctx API 1.11.0
- Coreutils: /bin/timeout; seeder Pear/Bare: avoid bare process.env (globalThis.process?.env)
- CI: verify-ctx-api-feature-bits; docs: handbook, developer-guide, kernel-extensions,
  capabilities index, environment appendix, READMEs

packages/bare-os-coreutils/scripts/seed-man-pages.mjs

@@ -69,6 +69,7 @@ const POSIX_TITLE = {
   tee: 'duplicate standard input',
   test: 'evaluate a condition',
   time: 'time a simple command',
+  timeout: 'run command with bounded wall time',
   touch: 'change file timestamps or create files',
   tr: 'translate or delete characters',
   true: 'return true value',
@@ -309,6 +310,9 @@ EXAMPLES.test = [
   { caption: 'string equal', code: 'test "$USER" = guest' }
 ]
 EXAMPLES.time = [{ caption: 'wall time a command', code: 'time sort big.txt' }]
+EXAMPLES.timeout = [
+  { caption: 'kill long job after 5s', code: 'timeout 5 slow-cmd' }
+]
 EXAMPLES.touch = [
   { caption: 'create empty', code: 'touch newfile' },
   { caption: 'refresh mtime', code: 'touch -c existing' }