v0.4 - Log Writer

The queue now empties itself automatically to a log file on disk.

Added

• log_writer.c/log_writer.h: system thread draining the event queue
• Writes JSONL log to disk (one file per session), independent of client presence
• Auto-creates C:\KDAMonitor\ and C:\KDAMonitor\logs\ if missing
• Reuses event_queue.c introduced in v0.3, adds a WakeEvent so the thread blocks instead of polling

Fixed

• Bugcheck IRQL_NOT_LESS_OR_EQUAL (0xA) caused by zeroing the event queue struct after initializing its wake event
• Undeclared STATUS_* identifiers due to incorrect ntstatus.h/ntddk.h include order
• Unresolved externals (__stdio_common_vswprintf/vsprintf) from ntstrsafe.h's inline implementation

Notes

• Validated end-to-end on Windows test VM: device creation, log file creation, event push/pop, JSONL write all confirmed working