792b2c6a9a
upgrade-forks.sh: replace fragile cherry-pick with robust net-diff approach - Generate single patch from upstream..old_HEAD (git diff, excludes Cargo.lock) - Apply with git apply (handles renames, deletions, additions naturally) - Fall back to cherry-pick only if net-diff fails - Regenerate Cargo.lock after apply (avoids conflict on generated file) - Single commit per upgrade (cleaner history) verify-fork-functions.sh: hardened with common-name guard (phase 17.2) Exclusion files committed to 3 forks: - installer: format_bytes_inner (intentionally inlined in lib.rs) - kernel: 17 functions (profiling, context, stats, event, syscall refactoring) - base: 52 functions (initfs, KMS, GPU drivers, USB, net, daemon patterns) Result: verify-fork-functions.sh passes for ALL 10 forks (exit 0). Build system now guarantees upstream + RB patches on every build.