feat(apps): permission manager equips apps (manifest+consent+decisions in /system), launches via init w/ file grant; shell unprivileged (/home); install/apps/allow/revoke; revoke stops running app; app-image tool; counter app

crates/apps/counter/manifest.toml

@@ -0,0 +1,10 @@
+# Remembers how often it ran, if the owner lets it keep a file.
+[app]
+id      = "kos.counter"
+name    = "Counter"
+version = "1.0.0"
+binary  = "counter"
+author  = "K-OS"
+
+[capabilities]
+optional = ["storage"]