feat(booter): POSIX/P2P roadmap — profile 1.0.14, ctx 1.50.0, docs & tests

- Sync declared POSIX profile, compliance matrix, syscalls examples, dashboard
- Extend holepunch clone sync reporting; bump protomux/hyperswarm lock fixture schema
- Optional shell read builtin (BARE_OS_SHELL_READ_*); host env passthrough
- Expand bareOsGetconfSysconf / getconf; pathconf for acct/union/mirror
- Wasm optional bare_os_monotonic_ms; replication live snapshot hints schema
- Socket bridge SO_RCVBUF/SO_SNDBUF; mq priority + FIFO ordering + tests
- Extract cooperative fcntl lock helpers; FIFO waiter drain tests
- Peer admission audit helpers, rate limit + redaction tests; security_posture schema
- CI: verify-ctx requires CHANGELOG row, d.ts version mention, compatibility matrix
- Warm-cache microbench (vfs suite); boot budget / metrics cohesion (prior work)
- Handbook, KERNEL_CONTRACT, kernel-program, env appendix, README, users-manual, schemas

Kernel bundle + seeder rsync + coreutils build verified via npm test.

docs/reference/ctx-client-helper.generated.ts

@@ -1,7 +1,7 @@
 // Auto-generated by scripts/gen-ctx-client-helper.mjs — do not edit by hand.
 
 /** Canonical `ctx` API semver from `packages/bare-os-booter/lib/bare-os-ctx-api.js`. */
-export const BARE_OS_CTX_API_CLIENT_VERSION = '1.49.0' as const
+export const BARE_OS_CTX_API_CLIENT_VERSION = '1.50.0' as const
 
 /** Relative path to the hand-maintained TypeScript contract (schema source of truth). */
 export const BARE_OS_CTX_DTS_SOURCE = 'packages/bare-os-booter/lib/bare-os-ctx.d.ts' as const
@@ -10,7 +10,7 @@ export const BARE_OS_CTX_DTS_SOURCE = 'packages/bare-os-booter/lib/bare-os-ctx.d
 export const BARE_OS_CTX_DTS_BAREOS_MEMBER_APPROX = 153 as const
 
 /** Byte length of `bare-os-ctx.d.ts` when this file was generated. */
-export const BARE_OS_CTX_DTS_BYTES = 19574 as const
+export const BARE_OS_CTX_DTS_BYTES = 19718 as const
 
 /** Pointers for external client generators (OpenAPI / JSON Schema follow-ups). */
 export const BARE_OS_CTX_SCHEMA_HINT = {