Second mklinux release, 24 patches on top of v7.0-mk1.

Memory pool: the pool is now a list of kernel-owned per-node chunks backed
by an in-tree contiguous page allocator, so /dev/lazy_cma is no longer
needed. Instance memory is allocated from the requested NUMA node, identity
page tables are built per instance region, and the pool is described with
standard memory nodes in the root device tree. Overlay fragments are
addressed by target path and can reach the pool.

Resource moves: pool-to-host moves are guarded, a device returning from the
pool is rebound to its host driver, and pool moves can no longer strand a
CPU or a device. Resource reconfiguration is serialized and rolls back on
failure. Baseline memory requests are validated before growing the pool.

Spawn lifecycle: spawn CPUs are parked through every death path, force halt
is armed through a persistent marker instead of a ring message, the spawn
E820 is rebuilt from the live grant at exec, and the host park area is
released, rebuilt, and re-mapped as the pool empties and regains memory.
Spawn kernels no longer reserve an IMA measurement segment.

Previous release: v7.0-mk1.