feat(firstboot): идемпотентный provision /data + machine-id (A06)

lib provision (idempotent; factory-reset; recover mid-run) + bin; machine-id из /dev/urandom.
Привязка к /etc/machine-id — every-boot юнит (План 5). Дефолты настроек — Settings.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Alexander <akotenev2003@gmail.com>

Cargo.lock

@@ -11,6 +11,12 @@ dependencies = [
  "memchr",
 ]
 
+[[package]]
+name = "anyhow"
+version = "1.0.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+
 [[package]]
 name = "async-broadcast"
 version = "0.7.2"
@@ -764,6 +770,16 @@ dependencies = [
  "tracing-subscriber",
 ]
 
+[[package]]
+name = "shturman-firstboot"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "shturman-common",
+ "tempfile",
+ "tracing",
+]
+
 [[package]]
 name = "shturman-ipc"
 version = "0.0.0"