BruhMount Milestone Checkpoint #586 (v2.1.0-enhanced)

🚀 BruhMount Milestone Checkpoint (#586)

Trigger: Accumulated 32 commits since checkpoint-554-75df961
Version: v2.1.0-enhanced
Commit: 60fcbf9

📋 Changes Compiled Since Last Checkpoint:

• webui: inline theme.css into styles.css (1ded61d)
• webui: compute the Material palette in JS from a single seed (6d34612)
• webui: make theme.json authoritative and localStorage a warm cache (012d6bd)
• webui: unify history state so back gestures always land on a consistent UI (654984c)
• module: split LKM load into post-fs-data.sh and rules load into metamount.sh (ff18bbc)
• kernel: make nm_qhash branchless (24c413c)
• kernel: build: compile with -O3 for improve code performance (774a37c)
• kernel: mark the bloom test unlikely in __nomount_get_rule_info() (882a5f9)
• webui: Add Polish translation (maxsteeel#98) (307ddc5)
• kernel: pass the already-resolved fsuid down to __nomount_get_rule_info() (9b12df6)
• kernel: rebuild child bloom filter on growth (5151600)
• kernel: scale child bloom filter size with directory child count (a362f60)
• kernel: cache uid_blocked result across iterate_dir to avoid duplicate lookups (043b445)
• kernel: reorder the atomic_inc_not_zero in iterate_dir (f0ebe84)
• kernel: remove duplicated children check in lookup (875a380)
• kernel: use cheap qhash for bloom prefilter, keep full_name_hash for bsearch (ac08b78)
• kernel: widen child bloom filter from 64 to 256 bits (8912760)
• module: share rule path generation (6d016b9)
• webui: avoid grep in opaque directory checks (8bc2638)
• kernel: split lookup rule resolution into RCU and sleeping phases (9ea42b0)
• kernel: fix UAF in lookup/iterate_dir by pinning dir_node with RCU and refs (5f13384)
• kernel: set fake_fop.owner to THIS_MODULE to prevent unload with open files (7a24793)
• kernel: hold RCU while reading dir_node/iop in d_revalidate to avoid UAF (7f22786)
• kernel: fix possible OOB in NM_CMD_GET_UIDS (dbd7f4a)
• kernel: correctly clean up pinned_dentry in nm_dir_rcu_free (fb1fb9a)
• module: remove rules clearing in customize.sh (83eae1b)
• module: fix typo in customize.sh (eb74bfb)
• kernel: don't call ->evict_inode() if its a virtual inode (7e7342c)
• webui: l10n: ru: small adjustments (maxsteeel#95) (20d011b)
• module: rename metamount.sh to post-fs-data.sh (42f9caa)
• chore(release): update update.json for version 21554 [skip ci] (fd8f31f)

---

Note: For 1-click in-manager updates, SU managers download the rolling latest release.