feat: build system transition to release fork + archive hardening

Release fork infrastructure:
- REDBEAR_RELEASE=0.1.1 with offline enforcement (fetch/distclean/unfetch blocked)
- 195 BLAKE3-verified source archives in standard format
- Atomic provisioning via provision-release.sh (staging + .complete sentry)
- 5-phase improvement plan: restore format auto-detection, source tree
  validation (validate-source-trees.py), archive-map.json, REPO_BINARY fallback

Archive normalization:
- Removed 87 duplicate/unversioned archives from shared pool
- Regenerated all archives in consistent format with source/ + recipe.toml
- BLAKE3SUMS and manifest.json generated from stable tarball set

Patch management:
- verify-patches.sh: pre-sync dry-run report (OK/REVERSED/CONFLICT)
- 121 upstream-absorbed patches moved to absorbed/ directories
- 43 active patches verified clean against rebased sources
- Stress test: base updated to upstream HEAD, relibc reset and patched

Compilation fixes:
- relibc: Vec imports in redox-rt (proc.rs, lib.rs, sys.rs)
- relibc: unsafe from_raw_parts in mod.rs (2024 edition)
- fetch.rs: rev comparison handles short/full hash prefixes
- kibi recipe: corrected rev mismatch

New scripts: restore-sources.sh, provision-release.sh, verify-sources-archived.sh,
check-upstream-releases.sh, validate-source-trees.py, verify-patches.sh,
repair-archive-format.sh, generate-manifest.py

Documentation: AGENTS.md, README.md, local/AGENTS.md updated for release fork model

local/patches/base/P2-acpi-defer-aml.patch

@@ -1,31 +0,0 @@
-Defer AML initialization until PCI registration completes.
-
-When acpid starts before pcid has registered the PCI fd, AML
-initialization fails with a misleading ERROR-level message. This is
-expected on every boot because the service ordering requires acpid to
-start before pcid-spawner. The AML interpreter initializes successfully
-after pcid registers via /scheme/acpi/register_pci.
-
-Changes:
-- aml_context_mut(): log at DEBUG instead of ERROR when PCI fd is None
-  (expected pre-registration state, not a fault)
-- Fadt::init(): skip \\_S5 evaluation when PCI is not yet registered,
-  since refresh_s5_values() is retried in register_pci_fd() after PCI
-  registration completes
-
-diff -urN a/drivers/acpid/src/acpi.rs b/drivers/acpid/src/acpi.rs
---- a/drivers/acpid/src/acpi.rs
-+++ b/drivers/acpid/src/acpi.rs
-@@ -896,7 +896,11 @@
-             match self.init(pci_fd) {
-                 Ok(()) => (),
-                 Err(err) => {
--                    log::error!("failed to initialize AML context: {}", err);
-+                    if pci_fd.is_none() {
-+                        log::debug!("AML init deferred until PCI registration: {}", err);
-+                    } else {
-+                        log::error!("failed to initialize AML context: {}", err);
-+                    }
-                 }
-             }
-         }