refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

crates/init/src/lib.rs

@@ -1,4 +1,5 @@
 #![no_std]
+#![forbid(unsafe_code)]
 
 extern crate alloc;
 
@@ -16,7 +17,7 @@ use types::bounded::CapSlot;
 use types::permission::{Permission, PermissionSet};
 
 /// Where the buffer storage shares with init is mapped.
-const STORAGE_BUF_VA: usize = 0x0180_0000;
+const STORAGE_BUF_VA: types::address::VirtualAddress = types::address::VirtualAddress::from_raw(0x0180_0000);
 /// Boot loads storage before init and leaves its endpoint here.
 pub(crate) const STORAGE_EP: CapSlot = CapSlot::const_new(2);