feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

crates/servers/terminal-server/src/lib.rs

@@ -103,6 +103,10 @@ impl server::Console for Screen {
     fn interrupt(&mut self, notification: CapSlot) {
         let _ = syscall::signal(notification);
     }
+
+    fn forget(&mut self, notification: CapSlot) {
+        syscall::drop_cap(notification);
+    }
 }
 
 pub fn run() -> ! {