Require user payloads to launch through :9020 with an exact PID response, removing the :9021 fallback and process-snapshot PID inference.
Supervise the private loader from daemon, recover it through :9021 before restarting util through :9020, and protect synchronous launches with a bounded busy marker.
Add strict loader tests, update runtime documentation, and remove obsolete elfldr and process-snapshot compatibility APIs.
Snapshot candidate processes around 9021 launch so homebrew that keeps
payload.elf as ki_comm still gets a correct PID file. Never write or
ForceKill pid 0/1 (legacy unknown sentinel hung ShellUI on TerminateProcess(1)).
Rename product, namespaces, libraries, paths, and assets from Orion/orion
to Onion/onion across the tree. TCP stack-shutdown magic is now ONIO
(0x4F4E494F) to match the corrected branding.