Add native macOS media construction and original Lion desktop support

[Vbitz]

Summary

• Add native UDIF/XAR/BOM, PBZX/IM4P/LZFSE, AppleDouble, Mach-O and bounded XML/binary plist support, with independent fixtures and retained LZFSE notices.
• Extend HFS metadata, attributes, compressed-file handling and native HFSX construction (forks, hardlinks, names and large catalogues).
• Add original amd64 XNU kernelcache/direct-boot handoff with EFI64, device tree, validated memory layout and native timing/CPU policy.
• Implement the native Lion board paths: ICH7 PATA DMA, HPET legacy replacement, truthful EFI identity, PCI framebuffer, SMC and bounded UHCI keyboard/absolute-pointer devices.
• Expose portable Starlark construction APIs and bounded native read-only inspection; document verified scope and limits.

All format handling and image construction stay native Go; Starlark handles orchestration. No host mounting/extraction/conversion, QEMU fallback, added guest bootloader or kernel/kext instruction patches. Apple media and SMC OSK are caller-supplied and are not included.

Dependency

Depends on merged tinyrange/cc#214. The cc submodule is pinned to its final merge commit 69e22fb67f7a907428cc32093ed662081128a634, not a feature-branch head. The private tinyrangex recipe PR follows this merge.

Validation

• go test ./... and go vet ./...
• Public Starlark suite: 163 passed, 0 failed
• Private recipe suite: 330 passed, 0 failed
• Fresh original Lion 10.7.5 / 11G63 image on native Linux/amd64 cc/KVM with that final cc pin: unattended Finder/Dock/SystemUIServer, no setup assistant, initial-only USB reports before input; original Calculator computes 2+2=4.
• Focused format-malformation/allocation-budget, HFS construction, Darwin handoff, ACPI, storage, SMC and UHCI ownership tests.
• Changed Go files pass formatting checks.

Scope

3D acceleration, every Apple installer postflight, other macOS releases and SMP are not claimed. No Apple payload, generated disk, key material or investigation diary is committed.

[Vbitz]

Private recipe consumer: tinyrange/tinyrangex#93. It pins trex to final merge commit 976aa08173aac33d7cc10da927004c26b21f106c, retaining cc final merge commit 69e22fb67f7a907428cc32093ed662081128a634. The private PR contains on-disk setup provisioning and the fresh unattended desktop/Calculator smoke.