refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

crates/types/src/generation.rs

@@ -2,7 +2,7 @@
 pub struct Generation(u32);
 
 impl Generation {
-    pub fn initial() -> Self {
+    pub const fn initial() -> Self {
         Self(0)
     }
 

crates/types/src/lib.rs

@@ -1,4 +1,5 @@
 #![no_std]
+#![forbid(unsafe_code)]
 
 pub mod address;
 pub mod badge;