M1 progress: engine port compiles except pf.c; AF_DIVERT socket family; ifq framework

- compat layer extended through the full BSD API surface pf_ioctl/pf_lb/
  pf_if/pf_norm/pf_table/pf_ruleset/radix/md5/sha2 need (all compile):
  cpumem/counters model, ifaddr/ifg groups, cred view, endian+in6 names,
  NAT46/64, SipHash24, mbuf_list, frag6 helpers, ip6 forward/checksum,
  tcp options/FSM names, taskqueue & sysctl shims (documented in
  docs/porting-notes.md)
- pfsrc/divert_sock.c: real BSD divert(4) as runtime-registered PF_DIVERT=32
  socket family inside the module (sock_register; NPROTO=AF_MAX=45 -> zero
  core patches); divert_packet/divert6_packet wired for pf.c
- compat/pfk_ifq.c: OpenBSD 8.0 ifq framework with priq back end; hfsc and
  fq_codel aliases pending M5 (recorded in feature matrix as pending)
- design + plan updated for the divert decision (user-requested)
- stage-port.sh: single deterministic rename program for headers and .c

scripts/vm-deploy.sh

@@ -13,16 +13,17 @@ lab_env
 
 cd "$REPO"
 FILES=()
-add() { # add <path...> — files only; dirs expanded
+add() { # add <path...> — files only; dirs expanded; warns on explicit misses
   local p
   for p in "$@"; do
     if [ -d "$p" ]; then add "$p"/*
     elif [ -f "$p" ]; then FILES+=("$p")
+    elif [ "$EXPLICIT" = 1 ]; then warn "skip missing: $p"
     fi
   done
 }
-if [ $# -gt 0 ]; then
-  add "$@"
+EXPLICIT=0
+if [ $# -gt 0 ]; then EXPLICIT=1; add "$@"
 else
   shopt -s nullglob
   add out/linux-*-bzImage out/bzImage out/*.ko module/*.ko tools/out/*