feat: kernel roadmap wave — bits4, policy v4, Pear/Bare compatibility

- protocol/booter: bits4 handshake, proc surfaces, boot policy v4, telemetry v4
- coreutils: nohup + ensure-man-pages; seed-man-pages fixes for extra pages
- kernel-runner: no static node:module (Pear); bare-module createRequire
- docs: handbook, reference, ADR, compatibility matrix, verify scripts

kernel/bin/mkfifo

@@ -125,6 +125,9 @@ async function run(ctx, argv) {
     nsStr && /^[a-zA-Z0-9._-]+$/.test(nsStr) ? `${nsStr}__${name}` : name
   try {
     ipc.create(actual)
+    if (typeof ctx.bareOsEmitIpcAudit === 'function') {
+      ctx.bareOsEmitIpcAudit({ type: 'mkfifo', name: actual })
+    }
   } catch (e) {
     ctx.console.error('mkfifo: ' + (e.message || e))
     ctx.exitCode = 1