Merge nucleic/olive-ember-seal-q7vk into dev

packages/naros-init/control

@@ -0,0 +1,12 @@
+Package: naros-init
+Version: @VERSION@
+Architecture: @ARCH@
+Maintainer: Nucleic <[email protected]>
+Section: admin
+Priority: optional
+Description: narOS PID-1 supervisor for container surfaces (NAROS.md §5)
+ Small static init: reaps zombies, forwards signals, optionally supervises the
+ in-container control bridge (NAROS_BRIDGE=1) and/or a primary command
+ (everything after --), and otherwise acts as the keepalive that replaces
+ ContainerEngine's sleep loop. Role-driven via /etc/naros/role or NAROS_ROLE.
+ In the VM desktop flavor systemd stays PID 1 and naros-init runs as a unit.

packages/naros-init/stage.sh

@@ -0,0 +1,9 @@
+# Stage the prebuilt static naros-init binary (built by CI from shell/naros-init).
+stage() {
+  local dest="$1" arch="$2" bin="$OS_DIR/dist/bin/naros-init-$arch"
+  if [ ! -x "$bin" ]; then
+    echo "prebuilt binary missing: $bin" > "$dest/.skip-reason"
+    return 1
+  fi
+  install -D -m 0755 "$bin" "$dest/usr/sbin/naros-init"
+}