Replace simulated ARCWYRE ISO assembler with fail-closed native packaging contract

[Bboy9090]

Finding

ecosystem/bootforge_builder.py currently does not build an ISO. It:

• scans *.manifest.toml filenames
• writes bootforge-manifest.json
• prints Successfully simulated hybrid ISO packaging
• returns success without creating output_iso
• uses hard-coded local Windows paths
• declares 1.0.0-PROD without release evidence
• points kernel_path at a Rust source file rather than a built Phoenix Prime Kernel artifact

This must not be treated as a production installer or ISO builder.

Locked ownership boundary

• PhoenixCore owns diagnosis, compatibility decisions, repair plans, USB orchestration, and build requests.
• bluephoenix-native owns Phoenix Prime Kernel builds, ARCWYRE edition resolution, application artifact validation, Limine staging, edition ISO construction, checksums, and emulator receipts.
• PhoenixCore must not implement a competing native ISO builder.

Required replacement

1. Rename the current behavior to an explicit plan/request operation. It must never claim an ISO was produced.
2. Remove 1.0.0-PROD; use an honest non-release status.
3. Replace hard-coded paths with CLI arguments and validated repository-relative or explicit absolute inputs.
4. Emit a versioned EditionBuildRequest containing:
   • edition ID
   • resolved-profile SHA-256
   • kernel artifact path and SHA-256
   • required application artifact manifests and SHA-256 values
   • target architecture
   • requested output name
   • signing identity
5. Fail closed when any required app artifact is unresolved, unverified, unsigned, or lacks receipts.
6. Hand the request to the canonical native builder in bluephoenix-native.
7. Report success only when a real ISO exists, has nonzero size, has a retained SHA-256 receipt, and the native builder returns success.
8. Add tests for missing kernel, missing app artifact, checksum mismatch, path escape, unresolved required app, and false-success prevention.

Current release blockers

• Required flagship app artifacts are not yet verified.
• Saga E-Reader source repository remains unresolved.
• ARCWYRE Live runtime bridge is not implemented.
• Physical SSD boot reached a black screen and is only hardware-attempted.

Safety

No physical USB write, partition write, firmware write, activation-lock bypass, FRP bypass, MDM bypass, or credential-access behavior belongs in this issue.