perf(kernel): linked cap tree, translate-based page lookup, next-fit frames/heap, targeted dequeue; host benches

crates/domain/src/memory/frame/proofs.rs

@@ -47,6 +47,8 @@ fn any_table() -> FrameTable<N> {
         total: N,
         frames,
         free,
+        // Next-fit may resume anywhere, so the proofs start it anywhere.
+        cursor: kani::any::<usize>() % (N + 1),
     }
 }