feat(settings): settings app: apps list + per-capability allow/revoke, about (who/role), sign out; system-only caps permissions/session (install refused); pm MANAGE_BADGE copy (list/apps/allow/revoke only), APPS op; init WHO + session pass-on; factory decisions seeded for new system apps; k-ui list_item/toggle, screens/back/scroll

Makefile

@@ -54,7 +54,7 @@ kani: kani-types kani-domain kani-kernel
 PROGRAMS = -p init -p echo -p sleep -p snake \
 	-p display-qemu -p input-qemu -p storage-qemu \
 	-p log-server -p permission-manager -p session-server -p smptest -p spawntest -p hello \
-	-p terminal-server -p shell -p cat -p ls -p counter -p gatekeeper -p flaky -p tally
+	-p terminal-server -p shell -p cat -p ls -p counter -p gatekeeper -p flaky -p tally -p settings
 
 # Programs first: the kernel image packs init and storage (see the
 # adapter's build.rs).