feat(firstboot): идемпотентный provision /data + machine-id (A06)

lib provision (idempotent; factory-reset; recover mid-run) + bin; machine-id из /dev/urandom.
Привязка к /etc/machine-id — every-boot юнит (План 5). Дефолты настроек — Settings.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Alexander <akotenev2003@gmail.com>

Cargo.toml

@@ -2,7 +2,12 @@
 resolver = "2"
 # Члены растут по планам реализации. crates/core, crates/apps, crates/tools —
 # группировка привилегированного ядра / first-party-апов / dev-инструментов (architecture §3).
-members = ["crates/shturman-common", "crates/shturman-ipc", "crates/shturman-sdk"]
+members = [
+    "crates/shturman-common",
+    "crates/shturman-ipc",
+    "crates/shturman-sdk",
+    "crates/core/shturman-firstboot",
+]
 
 [workspace.package]
 edition = "2021"