Expand bounded awk/expr/test toward Issue 7; refresh man, profile 1.0.18,

posix matrix/dashboard, and syscalls/process_table schema alignment (v8).

Booter: replication_operator_sketch/corestore hints, HRPC allowlist tests,
Protomux cap channel 65536-byte bound + export, Wasm posix_profile_peek,
swarm-disk and security_posture docs.

Coreutils/kernel: pkg-swarm-index pathCapabilityEnvelopeVerify on get;
pathcap-verify --trusted failure hint; rebuild bins and sync seeder.

Docs: KERNEL_CONTRACT, kernel-extensions, capabilities index, environment
appendix (warm-cache tuning, cap channel, Wasm env), handbook observability,
vault threat model (multisig), developer-guide ctx/HRPC/Wasm, DOCUMENTATION
release-checklist note, release-checklist optional tier1 drift.

Changelog maintenance in bare-os-booter and bare-os-protocol.

kernel/etc/bare-os/syscalls.example.json

@@ -3,7 +3,7 @@
   "ctxApiVersion": "1.53.0",
   "posixProfile": {
     "id": "bare-os-posix-like",
-    "version": "1.0.17"
+    "version": "1.0.18"
   },
   "ops": ["readFile", "writeFile", "socket"],
   "opsDetail": [
@@ -60,7 +60,7 @@
   "fdModel": {
     "schema": 1,
     "stdio": [0, 1, 2],
-    "processTableSchema": 7
+    "processTableSchema": 8
   },
   "signalModel": {
     "schema": 1,