feat(boot): gatekeeper gates boot (init→UI→gatekeeper→data); keystore disk + virtio-rng discovery; terminal READ_SECRET; storage SET_KEY; PageCount ≤8192, alloc cap gone; device window 0x01D0_0000; test-qemu types passcode over 2 boots

crates/init/src/lib.rs

@@ -80,6 +80,11 @@ fn launch_all(launcher: &mut launch::Launcher, programs: &[manifest::Program]) {
         libkos::print!("init: loading {}... ", p.name);
         match launcher.launch(p) {
             Ok(note) => libkos::println!("ok{}", note),
+            // Without the owner, nothing that touches user data may start.
+            Err(why) if p.unlocks => {
+                libkos::println!("STOP ({})", why);
+                idle();
+            }
             Err(why) => libkos::println!("SKIP ({})", why),
         }
     }