feat: SAS-R0 signature-feature attestation - not-ready means very-early panic

- SAS-E01: scheduler bootstrap failure was "non-fatal" -> panic (O(1)
  scheduler must stand up or nothing runs)
- PCKC-E01: boot-time key-derive roundtrip in utsm_init (get_or_derive
  probe segment, all-zero key or error -> panic; probe slot invalidated)
- DKM-E04..E07: manifest required-driver failures (module missing /
  ELF invalid / symbol scan fail / load fail) -> panic instead of
  "abort stage" silent continue
- QEMU verify: pckc derive roundtrip ok, sealed MAC established,
  selftest OK, boot reaches wizard, zero spurious panics

[STUB] P0/UTSM SAS-R0 attestation | 剩余STUB命中=101（违规=0） | “特色不是招牌，是性命” | 已提交=<this>

CODE/UTSM/dkm/manifest.c

@@ -1,5 +1,6 @@
 #include <utsm/dkm.h>
 #include <utsm/log.h>
+#include <utsm/panic.h>
 #include <utsm/types.h>
 #include "../arch/x86_64/limine.h"
 #include "../kernel/ini_parser.h"
@@ -356,7 +357,9 @@ static void dsm_load_stage_range(const ini_config *cfg, int limit_stage, u32 max
                 log_info("[DSM] module not found");
                 log_info(drv->name);
                 if (drv->required && stage->required) {
-                    log_error("[DSM] required module missing, abort stage");
+                    /* 严格错误策略插桩：required 驱动缺模块零降级（DKM-E04） */
+                    panic_full("DKM-E04 REQUIRED DRIVER MODULE MISSING",
+                               "required driver boot module not found in manifest stage", 0);
                     break;
                 }
                 continue;
@@ -368,11 +371,19 @@ static void dsm_load_stage_range(const ini_config *cfg, int limit_stage, u32 max
 
             if (dkm_check_elf64(f->address, f->size) != 0) {
                 log_error("[DSM] ELF check failed");
+                if (drv->required && stage->required) {
+                    panic_full("DKM-E05 REQUIRED DRIVER ELF INVALID",
+                               "required driver boot module failed ELF64 check", 0);
+                }
                 continue;
             }
 
             if (dkm_scan_symbols(f->address, f->size, &symbols) != 0) {
                 log_error("[DSM] symbol scan failed");
+                if (drv->required && stage->required) {
+                    panic_full("DKM-E06 REQUIRED DRIVER SYMBOL SCAN FAILED",
+                               "required driver symbol scan failed", 0);
+                }
                 continue;
             }
 
@@ -380,7 +391,9 @@ static void dsm_load_stage_range(const ini_config *cfg, int limit_stage, u32 max
             if (result != 0) {
                 log_error("[DSM] load failed");
                 if (drv->required && stage->required) {
-                    log_error("[DSM] required driver failed, abort stage");
+                    /* 严格错误策略插桩：required 驱动加载失败零降级（DKM-E07） */
+                    panic_full("DKM-E07 REQUIRED DRIVER LOAD FAILED",
+                               "required driver relocation/load failed", 0);
                     break;
                 }
             } else {

CODE/UTSM/dkm/manifest.d

@@ -0,0 +1,14 @@
+dkm/manifest.o: dkm\manifest.c include\utsm\dkm.h include\utsm\types.h \
+  include\utsm\dma.h include\utsm\block.h include\utsm\net.h \
+  include\utsm\paging.h include\utsm\log.h include\utsm\panic.h \
+  dkm\..\arch\x86_64\limine.h dkm\..\kernel\ini_parser.h
+include\utsm\dkm.h:
+include\utsm\types.h:
+include\utsm\dma.h:
+include\utsm\block.h:
+include\utsm\net.h:
+include\utsm\paging.h:
+include\utsm\log.h:
+include\utsm\panic.h:
+dkm\..\arch\x86_64\limine.h:
+dkm\..\kernel\ini_parser.h: