feat: atomic patch application, colored init output, XKB bridge, USB HID hardening

Build system (src/cook/fetch.rs):
- Atomic patch application: applies patches to staging directory (cp -al),
  atomically swaps on success, discards on failure — source tree is never
  left in a partially-patched state
- normalize_patch(): strips diff --git/index/new-file-mode headers that the
  build system's patch command does not recognize
- cleanup_workspace_pollution(): removes orphaned recipes/Cargo.toml and
  recipes/Cargo.lock to prevent workspace conflicts
- Added --allow-protected CLI flag to repo binary

Input stack (local/patches/base/P3-*.patch):
- P3-ps2d-led-feedback: PS/2 LED state handling + InputProducer migration
- P3-inputd-keymap-bridge: InputProducer enum, keymap bridge query
- P3-usbhidd-hardening: HID descriptor validation, static lookup table,
  8-button mouse support, transfer retry with exponential backoff
- P3-init-colored-output: ANSI-color coded init daemon output (green OK,
  red FAILED, yellow SKIP/WARN)

XKB bridge (local/recipes/system/redbear-keymapd/source/src/xkb.rs):
- Parses X11 xkb/symbols/* format, maps XKB keycodes to PS/2 scancodes,
  80+ X11 keysym names to Unicode, 4-level key support

Patch governance (local/patches/base/absorbed/README.md):
- Documents consolidation of P0-P3 patches into redox.patch

recipes/core/base/recipe.toml

@@ -4,17 +4,13 @@ rev = "463f76b9608a896e6f6c9f63457f57f6409873c7"
 patches = [
     "P0-daemon-fix-init-notify-unwrap.patch",
     "P0-workspace-add-bootstrap.patch",
-    "P0-bootstrap-workspace-fix.patch",
-    "P2-daemon-ready-graceful.patch",
+    "P0-init-continuous-scheduling.patch",
     "P2-i2c-gpio-ucsi-drivers.patch",
-    "P3-pcid-bind-scheme.patch",
-    "P3-pcid-aer-scheme.patch",
-    "P3-pcid-uevent-format-fix.patch",
-    "P3-acpi-wave12-hardening.patch",
-    "P3-acpi-power-dmi.patch",
-    "P3-xhci-device-hardening.patch",
-    "P5-init-supervisor-restart.patch",
-    "P5-init-daemon-panic-hardening.patch",
+    "P9-fix-so-pecred.patch",
+    "P3-inputd-keymap-bridge.patch",
+    "P3-ps2d-led-feedback.patch",
+    "P3-usbhidd-hardening.patch",
+    "P3-init-colored-output.patch",
 ]
 
 [build]