feat(apps): permission manager equips apps (manifest+consent+decisions in /system), launches via init w/ file grant; shell unprivileged (/home); install/apps/allow/revoke; revoke stops running app; app-image tool; counter app

Makefile

@@ -55,7 +55,7 @@ build:
 		-p init -p echo -p sleep -p snake \
 		-p display-qemu -p input-qemu -p storage-qemu \
 		-p log-server -p permission-manager -p session-server -p smptest -p spawntest -p hello \
-		-p terminal-server -p shell -p cat -p ls
+		-p terminal-server -p shell -p cat -p ls -p counter
 	cargo build --target $(RISCV_TARGET) --release -p adapter-riscv
 
 image: build