refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

crates/servers/permission-manager/src/main.rs

@@ -1,9 +1,11 @@
 #![no_std]
+#![forbid(unsafe_code)]
 #![no_main]
 
 extern crate libkos;
 
-#[unsafe(no_mangle)]
-extern "C" fn main() {
+libkos::entry!(main);
+
+fn main() {
     permission_manager::run();
 }