M1: compat layer + pf.ko skeleton builds against Linux 7.3.4

- pfk.h: BSD types/ioctl encoding (OpenBSD bit layout), locks (NET_LOCK=rwsem),
  pools, timeouts, mbuf shim over sk_buff, ifnet registry, toeplitz/siphash
- pfk_mod/pfk_hooks: misc /dev/pf (0600), IPv4 netfilter hook skeleton,
  DIOCGETSTATUS answered (M1 skeleton; engine ioctls land with pf_ioctl.c)
- vendorize/stage-port scripts: deterministic upstream staging with seds
  (struct renames, IFF_*->PFIFF_*, sa_len drops) logged to docs/porting-notes
- fixes: modules_prepare+Module.symvers for out-of-tree builds

module/include/compat/sys/timeout.h

@@ -0,0 +1,17 @@
+/* PFLINUX compat: <sys/timeout.h> */
+#ifndef _PFK_TIMEOUT_H
+#define _PFK_TIMEOUT_H
+#include <linux/timer.h>
+#include <linux/workqueue.h>
+typedef void (timeout_fn)(void *);
+struct timeout {
+	struct timer_list	timer;
+	struct work_struct	work;
+	timeout_fn		*fn;
+	void			*arg;
+	unsigned long		deadline_jif;
+	int			period_ms;
+	int			pending;
+	int			running;
+};
+#endif