Real per-VM log persistence: source attribution + ACL pin (FABRIC-3.md §XXVII)

Wires the previously-unused vm_log_attributed_vm() into LOG-APPEND's kernel
primitive so persisted log records carry a trustworthy source (the real
attributed VM's registry name, or "HADES" pseudo-source) instead of a
caller-supplied, trivially forgeable string. Drops src-addr/src-u from
LOG-APPEND's stack signature accordingly. Pins LOG-APPEND via bare ACL-PIN
in Artemis's own init.4th, matching BIRTH/CAPSULE-BIRTH's precedent for a
privileged word that can't reach the shared, host-portable ACL.4th.

Also fixes two console-banner nitpicks: a mis-rendering em dash (U+2014)
in the boot banner, and drops "Emergency" from the CLI banner text.

Doc corrections to artemis_sig.h/zuse_eligibility_list.h reconciling the
three fixed devblock ranges now in play. LOG-FLUSH (the intended normal
entry point) and level-aware log eviction remain open, flagged not fixed.

Re-verified clean boot to ok> on all 3 architectures after every change.
riscv64 showed one new, unrelated virtio_blk write-timeout anomaly during
Artemis's early physics self-test (self-recovered, boot unaffected,
sector doesn't map to the log region) -- flagged, not investigated.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016UNhH1mhi52i6Qihh7ZV5S

Makefile.starkernel

@@ -457,7 +457,8 @@ LOADER_SRCS_BASE := \
     $(KERNEL_SRC)/doe_log.c \
     $(KERNEL_SRC)/heartbeat.c \
     $(KERNEL_SRC)/homeblocks_sig.c \
-    $(KERNEL_SRC)/artemis_sig.c
+    $(KERNEL_SRC)/artemis_sig.c \
+    $(KERNEL_SRC)/log_region.c
 
 LOADER_ASM := \
     $(KERNEL_SRC)/arch/$(ARCH)/boot.S \
@@ -513,7 +514,8 @@ KERNEL_SRCS_BASE := \
     $(KERNEL_SRC)/doe_log.c \
     $(KERNEL_SRC)/heartbeat.c \
     $(KERNEL_SRC)/homeblocks_sig.c \
-    $(KERNEL_SRC)/artemis_sig.c
+    $(KERNEL_SRC)/artemis_sig.c \
+    $(KERNEL_SRC)/log_region.c
 
 KERNEL_ASM := $(wildcard $(KERNEL_SRC)/arch/$(ARCH)/*.S)