Align Bare OS with Holepunch stack across runtime, P2P, storage, trust, and ops surfaces

Implement the 50-point Holepunch alignment roadmap with a first-pass delivery across coreutils commands, policy examples, audit tooling, and docs. This adds new operator CLIs (appctl/corestorectl/ctxbaredoctor/dhtctl/trustctl), tiered catalog and runtime-compat reports, release-checklist integration, contributor guidance, and kernel/seeder mirrored artifacts for app registry, trust, network services, corestore namespaces, and update manifest workflows.

packages/bare-os-seeder/kernel/etc/bare-os/posix_utilities.json

@@ -1,13 +1,17 @@
 {
   "schema": 2,
   "profileId": "bare-os-posix-like",
-  "generatedAt": "2026-04-26T12:40:06.854Z",
+  "generatedAt": "2026-04-26T12:56:08.959Z",
   "note": "Sparse POSIX Issue 7 coverage hints for /bin utilities. Omitted command names are not yet profiled here.",
   "commandIndex": [
     {
       "name": "agent",
       "tier": "tier1_bin"
     },
+    {
+      "name": "appctl",
+      "tier": "tier1_bin"
+    },
     {
       "name": "arch",
       "tier": "tier1_bin"
@@ -80,6 +84,10 @@
       "name": "comm",
       "tier": "tier1_bin"
     },
+    {
+      "name": "corestorectl",
+      "tier": "tier1_bin"
+    },
     {
       "name": "cp",
       "tier": "tier1_bin"
@@ -88,6 +96,10 @@
       "name": "crontab",
       "tier": "tier1_bin"
     },
+    {
+      "name": "ctxbaredoctor",
+      "tier": "tier1_bin"
+    },
     {
       "name": "curl",
       "tier": "tier1_bin"
@@ -108,6 +120,10 @@
       "name": "df",
       "tier": "tier1_bin"
     },
+    {
+      "name": "dhtctl",
+      "tier": "tier1_bin"
+    },
     {
       "name": "dhtscan",
       "tier": "tier1_bin"
@@ -620,6 +636,10 @@
       "name": "truncate",
       "tier": "tier1_bin"
     },
+    {
+      "name": "trustctl",
+      "tier": "tier1_bin"
+    },
     {
       "name": "tsort",
       "tier": "tier1_bin"