feat(booter): POSIX/P2P roadmap — profile 1.0.14, ctx 1.50.0, docs & tests

- Sync declared POSIX profile, compliance matrix, syscalls examples, dashboard
- Extend holepunch clone sync reporting; bump protomux/hyperswarm lock fixture schema
- Optional shell read builtin (BARE_OS_SHELL_READ_*); host env passthrough
- Expand bareOsGetconfSysconf / getconf; pathconf for acct/union/mirror
- Wasm optional bare_os_monotonic_ms; replication live snapshot hints schema
- Socket bridge SO_RCVBUF/SO_SNDBUF; mq priority + FIFO ordering + tests
- Extract cooperative fcntl lock helpers; FIFO waiter drain tests
- Peer admission audit helpers, rate limit + redaction tests; security_posture schema
- CI: verify-ctx requires CHANGELOG row, d.ts version mention, compatibility matrix
- Warm-cache microbench (vfs suite); boot budget / metrics cohesion (prior work)
- Handbook, KERNEL_CONTRACT, kernel-program, env appendix, README, users-manual, schemas

Kernel bundle + seeder rsync + coreutils build verified via npm test.

kernel/bin/getconf

@@ -157,6 +157,20 @@ const CONF = {
   _SC_THREAD_DESTRUCTOR_ITERATIONS: '4',
   _SC_TTY_NAME_MAX: '32',
   _SC_LOGIN_NAME_MAX: '256',
+  /** Defaults; live session: **`ctx.bareOsGetconfSysconf`** (pipeline limits, swarm caps, …). */
+  _SC_BARE_OS_PIPELINE_MAX_BYTES: '2097152',
+  _SC_BARE_OS_PIPELINE_MAX_LINES: '50000',
+  _SC_BARE_OS_PIPELINE_MAX_STAGES: '32',
+  _SC_BARE_OS_GLOB_MAX_MATCHES: '4096',
+  _SC_BARE_OS_SHELL_LOOP_MAX: '10000',
+  _SC_BARE_OS_EXEC_MAX_DEPTH: '64',
+  _SC_BARE_OS_XARGS_MAX_PROCS: '8',
+  _SC_BARE_OS_SWARM_MAX_PEERS: '512',
+  _SC_BARE_OS_SWARM_MAX_CLIENT_CONNECTIONS: '256',
+  _SC_BARE_OS_SWARM_MAX_SERVER_CONNECTIONS: '256',
+  _SC_BARE_OS_SWARM_MAX_PARALLEL: '64',
+  _SC_BARE_OS_DGRAM_RECVQ_MAX: '256',
+  _SC_BARE_OS_ACCEPT_QUEUE_MAX: '64',
   _PC_PATH_MAX: '4096',
   _PC_NAME_MAX: '255',
   _PC_CHOWN_RESTRICTED: '1',