refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

crates/domain/src/notification/mod.rs

@@ -133,7 +133,7 @@ pub struct NotificationTable {
 }
 
 impl NotificationTable {
-    pub fn new() -> Self {
+    pub const fn new() -> Self {
         Self {
             slots: [const { None }; MAX_NOTIFICATIONS],
             generations: SlotGenerations::new(),