feat(storage): scoped grants (subtree, ro/rw), narrow-only, release revokes all holders; IPC KEEP_DELEGATE opt-in; shell cd/pwd, programs get ro cwd

crates/adapter-riscv/src/boot/caps.rs

@@ -14,9 +14,11 @@ pub fn grant_all(uart: &Uart, init_pid: ProcessId, storage_pid: ProcessId) {
         .with(types::permission::Permission::Execute)
         .with(types::permission::Permission::Delegate);
 
+    // Delegate so storage can mint the badged copies it grants.
     let ipc_perms = types::permission::PermissionSet::empty()
         .with(types::permission::Permission::Read)
-        .with(types::permission::Permission::Execute);
+        .with(types::permission::Permission::Execute)
+        .with(types::permission::Permission::Delegate);
 
     let storage_ep = kern()
         .create_endpoint(storage_pid)