feat: recipe durability guard — prevents build system from deleting local recipes

Add guard-recipes.sh with four modes:
- --verify: check all local/recipes have correct symlinks into recipes/
- --fix: repair broken symlinks (run before builds)
- --save-all: snapshot all recipe.toml into local/recipes/
- --restore: recreate all symlinks from local/recipes/ (run after sync-upstream)

Wired into apply-patches.sh (post-patch) and sync-upstream.sh (post-sync).
This prevents the build system from deleting recipe files during
cargo cook, make distclean, or upstream source refresh.

local/recipes/system/driver-manager/source/Cargo.toml

@@ -0,0 +1,19 @@
+[package]
+name = "driver-manager"
+version = "0.1.0"
+edition = "2024"
+description = "Device driver manager with deferred and async probing"
+
+[[bin]]
+name = "driver-manager"
+path = "src/main.rs"
+
+[dependencies]
+redox-driver-core = { path = "../../../drivers/redox-driver-core/source" }
+redox-driver-pci = { path = "../../../drivers/redox-driver-pci/source" }
+pcid_interface = { path = "../../../../../recipes/core/base/source/drivers/pcid", package = "pcid" }
+redox-scheme = "0.11"
+syscall = { package = "redox_syscall", version = "0.7" }
+log = "0.4"
+toml = "0.8"
+serde = { version = "1", features = ["derive"] }