feat(storage): scoped grants (subtree, ro/rw), narrow-only, release revokes all holders; IPC KEEP_DELEGATE opt-in; shell cd/pwd, programs get ro cwd

crates/init/src/spawn.rs

@@ -165,9 +165,12 @@ impl Server for Launcher<'_> {
         Reply(refused(reply::ERROR).0)
     }
 
-    fn handle_call(&mut self, badge: usize, words: [usize; 4], _cap: Option<CapSlot>) -> ([usize; 4], Option<CapSlot>) {
+    fn handle_call(&mut self, badge: usize, words: [usize; 4], _cap: Option<CapSlot>) -> ([usize; 4], Option<libkos::syscall::Give>) {
         match Request::decode(words) {
-            Some(r) => self.spawn(badge, &r),
+            Some(r) => {
+                let (reply, process) = self.spawn(badge, &r);
+                (reply, process.map(Into::into))
+            }
             None => ([MALFORMED, 0, 0, 0], None),
         }
     }