Add mount/umount syscalls and harden VFS/boot paths
* Add SYS_MOUNT/SYS_UMOUNT handling with root-only checks, ext2 gating, path/type validation, and a guard against unmounting '/'.
* Expose mount/umount in libc (syscall numbers, headers, wrappers) and add userland mount/umount commands.
* Split VFS child insertion into persistent vs virtual flows (vfs_create_virtual/vfs_insert_child_virtual) and use virtual creation for ext2/devfs synthetic nodes.
* Harden e820 map mutation with overflow-safe region tops, bounds checks, and fallible mmap_add_entry() handling.
* Tighten BIOS long-mode bring-up by mapping against full map top and fixing jump64 GDT descriptor alignment/limits.