feat(booter): POSIX/P2P kernel roadmap — sockets, disk.os, VFS, docs

- Bump bareOsCtxApiVersion to 1.46.0 and POSIX profile 1.0.10; sync
  syscalls example, process table, compatibility matrix, CHANGELOGs.
- Socket FD bridge: passive SOCK_DGRAM bind/connect/send path, poll
  readiness; bareOsPosixPoll monotonic timeouts via bare-hrtime.
- disk.os: replication_operator_sketch schema 2; cap-gated
  replication_operator_intent + audit; enrich protomux proc JSON.
- VFS: route /.bare/** to personal drive; optional
  BARE_OS_PERSONAL_VAULT_INDEX_CACHE_MS readdir TTL cache.
- Boot policy: p2pAdmission (peerAllowlistHex, hyperswarmBootstrap) in
  schema + kernel init merge into ctx.env when unset.
- Coreutils/booter getconf: expand _SC_* coverage; shell wait -n under
  BARE_OS_SHELL_POSIX_MODE; seeder multisig verify → security_posture.
- Tests: vfs /.bare routing; test.bare-smoke + test:bare; bench schema 2.
- Docs: syscall-socket-contract, handbook/env/kernel-extensions,
  holepunch drift pretest note, vault threat model multisig section.
- Drop hyperbee from bare-os-booter package.json dependencies (if that
  change is part of this commit).

packages/bare-os-protocol/CHANGELOG.md

@@ -4,6 +4,7 @@ Cross-package **version alignment** (ctx API, feature-bits doc, lifecycle schema
 
 ## Documentation (rolling)
 
+- **`BARE_OS_POSIX_PROFILE_VERSION` `1.0.10`** — Declared profile bumps for passive UDP **`bind`**, **`poll`** monotonic clock note, expanded **`sysconf`** / **`getconf`** surface, and normative **`socketMsgSurface` / ancillary `ENOTSUP`** text (see [`bare-os-posix-profile.js`](lib/bare-os-posix-profile.js), [`docs/reference/posix-compliance-matrix.json`](../../docs/reference/posix-compliance-matrix.json)).
 - **Seed RPC** — [`lib/channel.js`](lib/channel.js) rejects unknown **`bare_os.*`** method short names against **`BARE_OS_SEED_RPC_METHOD_SHORT_NAME_SET`** (**`bare_os.rpc_unknown_method`**); boot policy / env may add **`denySeedRpcMethods`** denials on the booter path. See [`docs/architecture/KERNEL_CONTRACT.md`](../../docs/architecture/KERNEL_CONTRACT.md).
 - **Stock hrpc routes** — Documented in **`KERNEL_CONTRACT`**: **`kernel.ping`**, **`kernel.capabilities`**, **`vfs.readText`**, **`bare_os.echo`**, **`bare_os.disk_os_hints`** (validated **`service` / `method` / `payload`**; optional **`BARE_OS_HRPC_ALLOWLIST_JSON`** per [`docs/schemas/bare-os-hrpc-allowlist.schema.json`](../../docs/schemas/bare-os-hrpc-allowlist.schema.json); deny-by-default for non-stock routes unless the host replaces **`ctx.bareOsHrpcRequest`** or enables **`BARE_OS_HRPC_EMIT_UNLISTED`**).
 - **Wire stack pins** — Booter **`protomux`** / **`hyperswarm`** resolved versions are recorded in [`packages/bare-os-booter/fixtures/protomux-hyperswarm-lock.json`](../packages/bare-os-booter/fixtures/protomux-hyperswarm-lock.json); bump with intentional dependency upgrades and full **`npm test`**.

packages/bare-os-protocol/lib/bare-os-posix-profile.js

@@ -4,7 +4,7 @@
  */
 
 /** Semver for the documented POSIX-like surface (handbook ch.9 + environment appendix). */
-export const BARE_OS_POSIX_PROFILE_VERSION = '1.0.9'
+export const BARE_OS_POSIX_PROFILE_VERSION = '1.0.10'
 
 /** Short identifier for telemetry and `/proc` mirrors. */
 export const BARE_OS_POSIX_PROFILE_ID = 'bare-os-posix-like'