v19 — Fix custom paths and harden bootstrap root

What changed

• Fixes #27: option 8 now distinguishes install and data folders, resolves them independently from marker-validated registry/runtime evidence, and never guesses standard filesystem paths.
• Fixes #28: bootstrap root now has direct, native-xbin, and bind-mounted delivery paths; each must prove uid=0, with better diagnostics if all fail.
• Clarifies #25: blueStackRoot does not disable SELinux. Disabled is BlueStacks' factory guest state; enabling permissive mode would require a compatible guest kernel and policy, so no misleading toggle was added.
• debug.cmd now captures path, bootstrap-root, mount, and SELinux evidence.

Verification

• Shipped blueStackRoot.cmd passed a destructive no-backup run and its built-in cold-boot Verify on BlueStacks 5.22.252.1006 (Tiramisu64_9).
• Magisk remained the sole root; no competing /system/xbin/su or bootstrap hash traces remained.
• 375 offline checks passed, including the real HD-Player.exe patch-equivalence gate.