Implement roadmap items across booter, protocol, kernel bundle, coreutils, and docs.

- Hyperswarm connection caps (env + /proc + disk.os replication_operator_sketch)
- Protomux operator metrics schema; warm-cache invalidation on replication
- ctx.bareOsSyscall nanosleep; socket bridge getsockopt/setsockopt (keepalive/nodelay)
- Extension signer pin verification before kernel.ext.d scripts; ctx/DTS updates
- Structured seeder logging (BARE_OS_SEED_LOG_*); release-checklist holepunch drift
- POSIX profile/matrix/conformance lists + handbook/env appendix/kernel-extensions
- Coreutils printf golden tests; sync kernel ↔ seeder parity after bundle

kernel/etc/bare-os/syscalls.example.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 8,
-  "ctxApiVersion": "1.46.0",
+  "ctxApiVersion": "1.47.0",
   "posixProfile": {
     "id": "bare-os-posix-like",
-    "version": "1.0.10"
+    "version": "1.0.11"
   },
   "ops": ["readFile", "writeFile", "socket"],
   "opsDetail": [
@@ -29,7 +29,7 @@
   "posixXsh": {
     "schema": 2,
     "note": "POSIX.1 XSH-style names; socket bridge may implement SOCK_DGRAM sendmsg/recvmsg when BARE_OS_POSIX_SOCKET_FD_BRIDGE.",
-    "namesCsv": "open,close,read,write,readv,writev,getsockopt,setsockopt,lseek,pipe,dup,dup2,fcntl,poll,select,umask,socket,bind,listen,accept,connect,send,recv,recvfrom,sendmsg,recvmsg,shutdown"
+    "namesCsv": "open,close,read,write,readv,writev,getsockopt,setsockopt,lseek,nanosleep,pipe,dup,dup2,fcntl,poll,select,umask,socket,bind,listen,accept,connect,send,recv,recvfrom,sendmsg,recvmsg,shutdown"
   },
   "socketMsgSurface": {
     "schema": 3,