feat: SKEL skeleton instrumentation - designed-but-unimplemented paths panic

- hypercall.c: 5 Phase 1.3 stubs -> HCALL-E01..E05 panic (no NOSYS return)
- drr_stub.c: snapshot alloc fail -> DRR-E01; new skeletons DRR-E02 root key
  seal, DRR-E03 task kill crypto erase, DRR-E04/E05 segment/system rollback,
  DRR-E06/E07 driver recovery ops dispatch
- sched.c: enable fail -> SCH-E02 panic (no silent demo skip)
- dkm/kernel_api.c: D1 hot-unload DKM-E01, D2 bare code loader DKM-E02,
  SIPI AP wake DKM-E03 skeletons
- virtio_net tx/rx stubs -> VNET-E01/E02; ath9k tx stub -> ATH-E01;
  xhci port reset -> XHC-E01; nvme MSI/MSI-X fail -> NVME-E01..E03 (no
  silent polling downgrade); e1000 MAC fallback -> E1K-E01
- pe_shim unimpl API -> PE-E01; PE ordinal import -> PE-E02
- kernel/main.c: lib sync / vscode install fail -> LNX-E01/E02
- NEW brand/brand.c (E1 boot anim BRAND-E01, E2 time egg BRAND-E02) and
  pkg/pkg.c (pacman skeleton PKG-E01..03), wired into UTSM MAKEFILE
- Deliberate design-internal fallbacks kept and documented (VMX skip,
  bzImage skip, KDE fallback, boot-module fallback, apic->PIC route)

CODE/UTSM/pe/pe_loader.c

@@ -17,6 +17,7 @@
 #include "../include/utsm/pe.h"
 #include <utsm/arena.h>
 #include <utsm/log.h>
+#include <utsm/panic.h>
 #include <utsm/types.h>
 
 /* 合成 shim 地址范围（32位解释器用）：0x00010000..0x0001FFFF */
@@ -202,7 +203,11 @@ static void resolve_imports(u8 *image, u64 image_base_actual,
 
             const char *func_name = 0;
             if (thunk & 0x80000000ULL) {
-                /* 序号导入：暂不支持，记为未实现 */
+                /* 严格错误策略插桩：序号导入是未实现路径，零降级 panic
+                 * （PE-E02）。shim 表按名称索引，序号导入无法解析语义。 */
+                log_error("[PE] ordinal import encountered");
+                panic_full("PE-E02 ORDINAL IMPORT NOT IMPLEMENTED",
+                           "PE import by ordinal: designed, not implemented", 0);
                 func_name = "#ordinal";
             } else {
                 /* 名称导入：thunk 是 IMAGE_IMPORT_BY_NAME 的 RVA */