feat(aot): compile closed module bundles with checked native bindings

[yabanana]

What

Convert a qualified closed ELF module graph into separate namespaced ARM64 objects and a checked native registry. Resolve function/data imports by versioned module identity, reject ambiguous exports or dependency cycles, and preserve each image's storage ownership. SCE symbol identities use NID plus published library/module names and versions rather than image-local indices.

This foundation handles strong bounded exports and qualified scalar ABIs. Runtime loading, arbitrary PRX recovery, constructors and guest TLS are separate work.

Tested

Latest integration checkpoint (12 October): aligned with main 2f4cc8983, including the new component technical-debt layout. The final combined stack with the separate C++ follow-up #4718 passed 588 compiler/relinker/runtime checks and 26 native integrations on Apple Silicon. Rebuilt cube AOT/reference still match all eight RGB frames after 600 flips each; controller and typed module-bundle acceptance pass. These are local results; hosted CI is running on the updated head. Full Linux/Windows builds still require maintainer dispatch.

Apple Silicon/macOS, final integrated stack based on main fe66af1: 526 compiler/relinker/runtime checks passed (native hello rerun with sysctl access); 26 native integration cases passed, including descriptor control, TLS/thread lifecycle and the modular consumer. Rebuilt graphics AOT/reference completed 600 flips each, teardown and eight exact RGB comparisons. Controller O2 scenarios and production sleep smoke, SHA-256 O0/O2 and independent memcmp O0/O2 passed. These are local combined-stack results; hosted CI on this PR is pending. Full Linux/Windows builds require maintainer dispatch.

The combined-stack consumer exercises this foundation; this PR keeps the topic separate from the TLS/thread and consumer follow-ups. No game compatibility or speedup claim.

Checklist

• Based on current main; checked for overlapping implementations
• One topic; follow-ups remain separate
• No added code comments, private notes, reports, images or binary fixtures
• Unsupported inputs reject; no weakened guards or silent fallback
• No new third-party runtime dependency
• Generic behavior; consumer qualification stays in examples
• Depends on: test(aot): run optimized controller and independent component consumers #4424, feat(aot): lower finite native dispatch and optimized integer operations #4423, feat(aot): retain incremental debug facts and scoped obligations #4422, feat(aot): run controller input and independent provider-transfer consumers #4397, feat(aot): qualify provider contracts and recover bounded debug facts #4396, feat(aot): derive guard sites from qualified image recipes #4156, feat(aot): run source-built graphics on native Apple ARM64 #3891, feat(aot): discuss native ARM64 compiler architecture and integration #1835
• Unblocks: none
• AI-assisted: yes

[yabanana]

Superseded by #5021, which now contains the consolidated native ARM64 AOT implementation and verified consumers. #1835 remains the architecture discussion. Closing this stacked PR to keep one implementation review; its branch and review history are retained. This is not a merge into main.