feat(bare-os): kernel wave 3 — bits3, seed RPCs, policy, proc, CI schemas

Add third capability word (STOCK_V3) and word2 tail bits; seed RPCs
snapshot_hints and peer_firewall_stats; /proc mirrors (snapshot_hints,
pear_trust, rlimits, hdms_health, initd_graph) and /proc/net/udp; boot
policy v3 (requireFeatureBits2/3, Pear IPC allowlist, VFS deny prefixes,
initd restart cap); VFS enforcement for boot-policy path denies; delegate
in-flight caps; gated shell local/declare; initd path conditions, ordered
suspend/resume, OnInactiveSec timers; vfs.watch swarm/replication;
validate-example-schemas.mjs + ajv in pretest; extend verify-ctx for V3;
bump ctx API to 1.12.0; ADR 001, protocol, handbook, dev-guide, and
reference docs; seeder/kernel parity and booter tests.

Chore: Prettier table alignment in CHANGELOG and READMEs; compact
bareOsRequestPearReload signature in bare-os-ctx.d.ts.

scripts/verify-ctx-api-feature-bits.mjs

@@ -48,14 +48,32 @@ function main() {
     console.error('index.js should reference BARE_OS_KERNEL_FEATURES_STOCK_V2')
     process.exit(1)
   }
+  if (!idx.includes('BARE_OS_KERNEL_FEATURES_STOCK_V3')) {
+    console.error('index.js should reference BARE_OS_KERNEL_FEATURES_STOCK_V3')
+    process.exit(1)
+  }
+  if (!idx.includes('bits3')) {
+    console.error('index.js should wire seed/features bits3')
+    process.exit(1)
+  }
 
   const bitsSrc = read(bitsPath)
   if (!bitsSrc.includes('export const BARE_OS_KERNEL_FEATURES_STOCK_V1')) {
-    console.error('kernel-feature-bits.js missing BARE_OS_KERNEL_FEATURES_STOCK_V1')
+    console.error(
+      'kernel-feature-bits.js missing BARE_OS_KERNEL_FEATURES_STOCK_V1'
+    )
     process.exit(1)
   }
   if (!bitsSrc.includes('export const BARE_OS_KERNEL_FEATURES_STOCK_V2')) {
-    console.error('kernel-feature-bits.js missing BARE_OS_KERNEL_FEATURES_STOCK_V2')
+    console.error(
+      'kernel-feature-bits.js missing BARE_OS_KERNEL_FEATURES_STOCK_V2'
+    )
+    process.exit(1)
+  }
+  if (!bitsSrc.includes('export const BARE_OS_KERNEL_FEATURES_STOCK_V3')) {
+    console.error(
+      'kernel-feature-bits.js missing BARE_OS_KERNEL_FEATURES_STOCK_V3'
+    )
     process.exit(1)
   }
   const docMatch = bitsSrc.match(