- Add first-party vs vendored rules to verify-banned-terminology; naming docs,

alias matrix, verify-naming-alias-matrix in pretest
- Canonical bareOsRegisterBootStepHook / Invoke / EmitBareBootStepHint with
  legacy *Phase* wrappers; typings, runtime caps, docs, CHANGELOG
- VFS: evaluateBareOsVfsPathPolicy; rename hypercore-pack proc locals; add
  /proc/bare_os/security_posture.json
- Stock kernel: invokeCtxBootHooks, boot txn journal transactionState, extension
  cycle extId diagnostics, boot snapshot schema 2 + provenance
- Offline LKG: BARE_OS_OFFLINE_LKG_ACTIVE / REASON env hints
- Protocol: BARE_OS_PROTOMUX_CHANNEL_SCHEMA_VERSION re-exported from channel.js
- Stubs: corestore suspend/resume register, swarm snapshot, extension resolver,
  initd state enum; shell split note; benchmark/SDK script placeholders
- Docs: ota-channels, conformance-dashboard, kernel-extensions specs index,
  data README; handbook/developer-guide/users-manual cross-links
- Sync packages/bare-os-seeder/kernel with kernel/init.js and STRUCTURE.md

DOCUMENTATION.md

@@ -33,6 +33,7 @@ The file-by-file inventory that used to live in a single monolith is now split u
 - **[Documentation hub](docs/README.md)** — `docs/` tree: reference index, catalog, themes.
 - **[Handbook](handbook/README.md)** — narrative architecture and operations.
 - **[Developer guide](developer-guide/README.md)** — extending the image, `ctx`, coreutils, testing.
+- **Legacy ↔ canonical names** — [`docs/reference/naming-alias-matrix.md`](docs/reference/naming-alias-matrix.md)
 
 ---