feat(net): capsule inbound TCP bind (bind_tcp) (#1230)

[jvsteiner]

Linked Issue

Closes #1230.

Summary

Adds governed inbound TCP listeners for WASM capsules. A capsule can bind an explicitly declared loopback endpoint, await readiness or accept a connection, and use the existing network-stream interface without ambient host networking.

Changes

• Implement bind-tcp with manifest net_bind authorization and a loopback-only boundary.
• Prevent TCP declarations from authorizing the kernel-provided Unix CLI listener or session token.
• Serialize readiness acceptance, preserve one pending connection, and perform quota plus durable audit accounting at the actual accept effect.
• Carry host-observed endpoints with pending connections so transfer cannot lose provenance or leak quota.
• Enforce listener and stream ceilings across the pooled capsule runtime with per-Store reset accounting.
• Prevent readiness pollables from retaining listener resources after listener drop.
• Append NetAccept without shifting existing public audit discriminants.
• Pin the canonical WIT submodule to merged docs: align TCP bind capability contract wit#24 and regenerate the staged publish mirror from that source.

Verification

• cargo test -p astrid-capsule engine::wasm::host::net
• cargo test -p astrid-capsule returning_one_store_preserves_another_stores_stream_quota
• cargo test -p astrid-audit
• cargo clippy for affected crates with all features and warnings denied
• repository file-size check reproduced locally

Regression coverage includes Unix and TCP authority separation, cancellation and concurrent readiness, listener lifetime, quota release, two-Store pooled accounting, loopback policy, and audit provenance.

AI / Tool Assistance

Assisted-by: Anthropic Claude: Opus 5nAssisted-by: OpenAI Codex: GPT-5

Claude Opus 5 assisted Jamie with the original implementation. Codex performed the subsequent adversarial review, implemented authority and accounting fixes, added regression coverage, aligned contract documentation, and validated the affected crates. Human-authored DCO and GPG signatures remain on every commit.

Checklist

• Linked to an issue
• CHANGELOG.md updated
• I understand every change in this PR and can explain its design, risks, and validation.
• I reviewed and tested any meaningful tool-generated output included in this PR.
• Every non-bot, non-merge commit has a matching Signed-off-by trailer.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[joshuajbouw]

added the breaking change label. I want to pull the other libs except astrid and astrid-types from crates anyways as they shouldn't be used as libraries and only for this project. CI will get cranky but c'est la vie.