refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

crates/domain/src/generations.rs

@@ -12,7 +12,7 @@ pub struct SlotGenerations<const N: usize> {
 }
 
 impl<const N: usize> SlotGenerations<N> {
-    pub fn new() -> Self {
+    pub const fn new() -> Self {
         Self {
             gens: [Some(Generation::initial()); N],
         }