feat(storage): per-app/owner/system encryption live: gatekeeper hands seed + fresh flag, storage unlocks layer, init seeds areas from factory/ (empties on new key); rmdir op; test-qemu checks sealed home + reboot persistence

crates/libkos/src/fs.rs

@@ -136,6 +136,11 @@ impl Storage {
         self.with_path(op::MKDIR, path, reply::OK).map(|_| ())
     }
 
+    /// Removes the empty directory at `path`.
+    pub fn rmdir(&mut self, path: &[u8]) -> Result<()> {
+        self.with_path(op::RMDIR, path, reply::OK).map(|_| ())
+    }
+
     pub fn close(&mut self, handle: FileHandle) -> Result<()> {
         self.expect([op::CLOSE, handle.0 as usize, 0, 0], reply::OK).map(|_| ())
     }