docs: ASCII typography and style normalization across all repo text

Replace every em dash with real punctuation (rewrites, not hyphen swaps)
in docs, code comments, scripts, configs, and the port records; convert
en dashes, curly quotes, ellipsis glyphs, arrows, and section signs to
ASCII; drop machine-writing tell phrases from living docs. ADR titles
now use a colon. The M2 bring-up DTS model string carried an em dash
into the patch series and its record echoes; fixed at both, and the full
series re-verified to apply cleanly onto pristine 6.18.46. One comment
in freshness.h deliberately names the em dash glyph the UI renders as
the unknown mark; that is data, kept as prose naming it.

Verified: cargo tests (sim, config-lint, rs485-bridge), shellcheck,
both driver MC/DC harnesses, patches-apply.

qemu/rootfs/etc/rc

@@ -1,13 +1,13 @@
 #!/bin/busybox sh
 # shellcheck shell=dash
 # Stage-1 rc: sourced by /init (still PID 1, initramfs root) when a virtio
-# disk is present. Emulates U-Boot's slot choice — mount the validated slot's
+# disk is present. Emulates U-Boot's slot choice: mount the validated slot's
 # rootfs and switch_root into it. This is an EMULATION of the A/B selection
 # outcome, not the BCB/bootcount mechanism itself.
 #
 # Every guarded failure path `return`s to /init (valid in a sourced script;
 # /init then falls through to shell/poweroff). The final exec is the one
-# unguardable step: if switch_root itself fails to launch, the shell — PID 1 —
+# unguardable step: if switch_root itself fails to launch, the shell (PID 1)
 # exits and the kernel panics; the applet-existence check below catches the
 # only preventable variant of that.
 
@@ -19,22 +19,22 @@ slot="$(warden_slot)"
 
 root="/dev/block/by-name/rootfs${slot}"
 if [ ! -e "$root" ]; then
-    echo "rc: $root missing — staying in initramfs"
+    echo "rc: $root missing: staying in initramfs"
     return 0
 fi
 
 mkdir -p /mnt
 if ! mount -t ext4 "$root" /mnt; then
-    echo "rc: mount of $root failed — staying in initramfs"
+    echo "rc: mount of $root failed: staying in initramfs"
     return 0
 fi
 if [ ! -x /mnt/sbin/init ]; then
-    echo "rc: $root has no /sbin/init — staying in initramfs"
+    echo "rc: $root has no /sbin/init: staying in initramfs"
     umount /mnt
     return 0
 fi
 if ! command -v switch_root >/dev/null; then
-    echo "rc: busybox lacks switch_root — staying in initramfs"
+    echo "rc: busybox lacks switch_root: staying in initramfs"
     umount /mnt
     return 0
 fi

qemu/rootfs/etc/warden-lib.sh

@@ -1,11 +1,11 @@
 # shellcheck shell=sh
 # Shared helpers for the VM's stage-1 (/init + /etc/rc, initramfs) and stage-2
 # (/sbin/init, disk rootfs) boot scripts. Present in both filesystems because
-# both are staged from the same qemu/rootfs/ skeleton. ONE copy of each rule —
+# both are staged from the same qemu/rootfs/ skeleton. ONE copy of each rule:
 # the slot-validation drift between two hand-copied parsers was a real
 # review finding.
 
-# Populate /dev/block/by-name/<PARTNAME> symlinks from sysfs uevents — the
+# Populate /dev/block/by-name/<PARTNAME> symlinks from sysfs uevents: the
 # contract flare-edge's slotctl.rs relies on. blkdevparts= gives every vda
 # partition a PARTNAME.
 warden_populate_by_name() {
@@ -26,7 +26,7 @@ warden_populate_by_name() {
 }
 
 # Parse warden.slot= from the cmdline (whole-token, never substring) and
-# VALIDATE it — echoes "_a" or "_b", falling back to _a with a warning.
+# VALIDATE it: echoes "_a" or "_b", falling back to _a with a warning.
 warden_slot() {
     slot="_a"
     # shellcheck disable=SC2013 # cmdline TOKENS are the unit here, not lines

qemu/rootfs/init

@@ -2,7 +2,7 @@
 # shellcheck shell=dash
 # WardenOS QEMU device sim: initramfs /init (PID 1).
 #
-# Phase-1 duty: prove the kernel booted on -M virt — print the sentinel the
+# Phase-1 duty: prove the kernel booted on -M virt; print the sentinel the
 # smoke test greps for, then power off (PSCI SYSTEM_OFF, so qemu exits).
 # `warden.shell` on the kernel cmdline drops to an interactive shell instead.
 
@@ -19,7 +19,7 @@ mount -t sysfs sysfs /sys
 echo "WARDEN-QEMU-BOOT-OK"
 
 # With a virtio disk attached, hand over to the stage-1 rc (by-name symlinks,
-# slot select, switch_root). It only returns on failure — then fall through to
+# slot select, switch_root). It only returns on failure; then fall through to
 # the diskless shell/poweroff behavior below.
 if [ -b /dev/vda ]; then
     # shellcheck source=qemu/rootfs/etc/rc disable=SC1091

qemu/rootfs/sbin/init

@@ -2,7 +2,7 @@
 # shellcheck shell=dash
 # Stage-2 init: PID 1 on the disk rootfs (rootfs_a or rootfs_b), reached via
 # switch_root from the initramfs. Brings up the minimum a WardenOS userspace
-# needs — mounts, by-name symlinks, network, serial alias — then starts any
+# needs (mounts, by-name symlinks, network, serial alias), then starts any
 # payload daemons and holds. This stands in for the device's BusyBox SysV
 # /etc/init.d/S* sequence; it is deliberately tiny, not a model of it.
 
@@ -17,7 +17,7 @@ mount -t tmpfs tmpfs /tmp
 # shellcheck source=qemu/rootfs/etc/warden-lib.sh disable=SC1091
 . /etc/warden-lib.sh
 
-# Fresh devtmpfs — repopulate the by-name contract; same VALIDATED slot rule
+# Fresh devtmpfs: repopulate the by-name contract; same VALIDATED slot rule
 # as stage 1 (shared helper, so the two can never drift).
 warden_populate_by_name
 slot="$(warden_slot)"
@@ -45,7 +45,7 @@ mkdir -p /userdata/warden
 [ -c /dev/ttyS0 ] && ln -sf /dev/ttyS0 /dev/ttyS4
 
 # Network: slirp user-mode net on eth0 (DHCP, fallback to QEMU's static map).
-# The fallback keys off the interface actually having an address — udhcpc
+# The fallback keys off the interface actually having an address: udhcpc
 # exiting 0 only proves a lease, not that the hook script applied it.
 ip link set lo up
 if [ -e /sys/class/net/eth0 ]; then
@@ -64,7 +64,7 @@ echo "WARDEN-QEMU-ROOTFS-OK slot=${slot}"
 
 # Payload daemons (dropped into /usr/bin by qemu/mkimage.sh from qemu/payload/).
 # WARDEN_FLARE_INSECURE=1: the VM's portal is the desk mock over plain HTTP.
-# This is a dev instrument — a production device build never sets it.
+# This is a dev instrument: a production device build never sets it.
 export WARDEN_FLARE_INSECURE=1
 # No HPMCU on -M virt: the mailbox SRAM (0xff6fff00) is unmapped bus space
 # here, and flared's /dev/mem poke dies with an external abort (SIGBUS). The