refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

crates/domain/src/thread/table.rs

@@ -18,7 +18,7 @@ pub struct ThreadTable {
 }
 
 impl ThreadTable {
-    pub fn new() -> Self {
+    pub const fn new() -> Self {
         Self {
             threads: [const { None }; MAX_THREADS],
             generations: SlotGenerations::new(),