feat: POSIX/P2P roadmap — multisig shape, socket bridge, bin index, docs

- Unify pear.multisig.json validation via bare-os-protocol + kernel boot fragment
- Socket bridge: SCM_RIGHTS path, ancillary handling, TCP half-close/shutdown how,
  connect tcpRecvQueue + poll/recv EOF and EPIPE-shaped errors
- Bin manifest / Hyperbee hints schema 2 + namesDigest; batch-write invalidation
- Host booter structured logging; BOOT_PERF_DETAIL bare_stdlib_merge_ns timing
- Wasm kernel optional syscall imports; security_posture rotation hints schema 2
- Shell errexit inside compound bodies; expand getconf/_SC_* and bareOsGetconfSysconf
- Subprocess bridge snapshot timeoutPolicy; blind-relay protomux backpressure tests
- Pear updater minimal delegate example + verify-pear scan; holepunch drift repos
- Refresh handbook, kernel-image, syscall-socket-contract, posix matrix, PEAR-RUN

Rebuild coreutils/bundles; bundle kernel; keep seeder/kernel parity.

docs/examples/pear-updater-delegate-minimal.mjs

@@ -0,0 +1,14 @@
+/**
+ * Minimal Pear updater delegate for `BARE_OS_PEAR_UPDATER_MODULE`.
+ * Bare/Pear-safe: no static `node:` imports (see `scripts/verify-pear-no-static-node-import.mjs`).
+ */
+export async function getPearUpdaterState() {
+  return {
+    schema: 1,
+    channel: 'example',
+    pending: false,
+    note: 'Replace with real pear-updater integration; keep imports Bare-resolvable.'
+  }
+}
+
+export default getPearUpdaterState