- Add bits8 / STOCK_V8 / FEATURE8_* and wire strict seed + ctx API bumps

- Protocol 0.4.0: new seed RPCs, channel/replication adjuncts, STOCK_V8 test
- Booter: wave8 /proc surfaces, vfs routes, boot policy env passthrough, limits
- Kernel: boot.policy v8 (feature bits, bare runtime min, deny RPCs, protomux cap)
- Schemas/examples: extensions v5, telemetry/audit bumps; seeder/kernel rsync parity
- Docs: roadmap Wave 8 (100 rows), ADR Word 8, capabilities index, privacy/GDPR, DNSSEC
- CI: verify-kernel-roadmap-wave8, wave3/ctx/compat updates; scripts/README
- Fix /proc flat + nested listing order to match default string sort (vfs + tests)

scripts/verify-ctx-dts.mjs

@@ -16,7 +16,14 @@ const needles = [
   'bareOsSeedCapabilityBits5',
   'bareOsAdvertisedKernelBits6',
   'bareOsSeedCapabilityBits6',
+  'bareOsAdvertisedKernelBits7',
+  'bareOsSeedCapabilityBits7',
+  'bareOsProtocolPackageVersion',
+  'bareOsPearRuntimeVersion',
   'bareOsBooterPackageVersion',
+  'bareOsEmitBundlebeeHint',
+  'bareOsRegisterBareDiagnosticsTap',
+  'bareOsHrpcRequest',
   'bareOsPearUpdaterDelegate',
   'bareOsEmitHyperdhtBootstrapRefresh',
   'bareOsReadDelegateFairnessSnapshot',
@@ -24,7 +31,12 @@ const needles = [
   'bareOsReadSubprocessBridgeSnapshot',
   'bareOsRequestKernelProfileReload',
   'bareOsIsCtxMethodAllowed',
-  'bareOsEmitIpcAudit'
+  'bareOsEmitIpcAudit',
+  'bareOsAdvertisedKernelBits8',
+  'bareOsSeedCapabilityBits8',
+  'bareOsBareRuntimeVersion',
+  'bareOsEmitStructuredCloneCap',
+  'bareOsProtomuxChannelAlias'
 ]
 
 function main() {