feat(apps): permission manager equips apps (manifest+consent+decisions in /system), launches via init w/ file grant; shell unprivileged (/home); install/apps/allow/revoke; revoke stops running app; app-image tool; counter app

Cargo.toml

@@ -4,6 +4,7 @@ members = [
     "crates/apps/hello",
     "crates/apps/shell",
     "crates/apps/cat",
+    "crates/apps/counter",
     "crates/apps/ls",
     "crates/apps/echo",
     "crates/apps/sleep",
@@ -13,6 +14,7 @@ members = [
     "crates/domain",
     "crates/elf",
     "crates/manifest",
+    "crates/tools/app-image",
     "crates/init",
     "crates/kernel",
     "crates/platform",