feat(booter): POSIX/P2P kernel roadmap — sockets, disk.os, VFS, docs

- Bump bareOsCtxApiVersion to 1.46.0 and POSIX profile 1.0.10; sync
  syscalls example, process table, compatibility matrix, CHANGELOGs.
- Socket FD bridge: passive SOCK_DGRAM bind/connect/send path, poll
  readiness; bareOsPosixPoll monotonic timeouts via bare-hrtime.
- disk.os: replication_operator_sketch schema 2; cap-gated
  replication_operator_intent + audit; enrich protomux proc JSON.
- VFS: route /.bare/** to personal drive; optional
  BARE_OS_PERSONAL_VAULT_INDEX_CACHE_MS readdir TTL cache.
- Boot policy: p2pAdmission (peerAllowlistHex, hyperswarmBootstrap) in
  schema + kernel init merge into ctx.env when unset.
- Coreutils/booter getconf: expand _SC_* coverage; shell wait -n under
  BARE_OS_SHELL_POSIX_MODE; seeder multisig verify → security_posture.
- Tests: vfs /.bare routing; test.bare-smoke + test:bare; bench schema 2.
- Docs: syscall-socket-contract, handbook/env/kernel-extensions,
  holepunch drift pretest note, vault threat model multisig section.
- Drop hyperbee from bare-os-booter package.json dependencies (if that
  change is part of this commit).

docs/schemas/boot.policy.schema.json

@@ -251,6 +251,23 @@
       },
       "description": "Merged to BARE_OS_INITD_* env hints for bare-initd"
     },
+    "p2pAdmission": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "peerAllowlistHex": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "When ctx.env BARE_OS_PEER_ALLOWLIST_HEX is unset, merged as JSON string into that env (comma-separated hex public keys)"
+        },
+        "hyperswarmBootstrap": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "When ctx.env BARE_OS_HYPERSWARM_BOOTSTRAP is unset, merged as JSON string into that env (comma-separated host:port)"
+        }
+      },
+      "description": "Optional P2P admission hints merged into ctx.env during boot when corresponding env vars are empty"
+    },
     "extensionSignerPinsV5": {
       "type": "object",
       "additionalProperties": { "type": "string" },