refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

crates/bins/display-qemu/src/main.rs

@@ -1,4 +1,5 @@
 #![no_std]
+#![forbid(unsafe_code)]
 #![no_main]
 
 extern crate libkos;
@@ -9,8 +10,9 @@ use types::bounded::CapSlot;
 const EP: CapSlot = CapSlot::const_new(0);
 const INPUT: CapSlot = CapSlot::const_new(1);
 
-#[unsafe(no_mangle)]
-extern "C" fn main() {
+libkos::entry!(main);
+
+fn main() {
     // Init hands over the GPU, or nothing if the machine has none.
     let dev = libkos::device::receive_device(EP);
     let input = subscribe_to_input();