kernel: RV1106 6.18.46 patch series + hermetic build wrapper (P1)

- patches/: the pristine-6.18.46 -> WardenOS delta as a 13-patch, subsystem-split
  series (223 files, ~136K lines: clk, pinctrl, DTs/mach, usb-phy, VOP/panel/rgb,
  mailbox, pvtm, rknpu, rga, aic8800 wifi, audio codec, thermal/rtc/adc/gmac/touch).
  Verified: every patch applies cleanly onto pristine (git apply --check), the full
  series reproduces the hardware-verified tree, and the applied source configures +
  builds the warden dtb + rockchip DRM drivers (rc=0).
- build/build-kernel.sh: fetch+verify pristine (sha256-pinned) -> apply series ->
  warden_defconfig -> zImage + rv1106-warden.dtb. build/warden_defconfig captured.
- CI: `patches-apply` (GitHub-hosted, cached tarball) enforces the series applies;
  `kernel-build` (self-hosted warden-sdk runner, dispatch-gated until registered)
  runs the full build and uploads the image.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017wB8KB3MMQztRDXCMCkPrf

patches/05-build-wiring.patch

@@ -0,0 +1,28 @@
+diff --git a/drivers/Kconfig b/drivers/Kconfig
+index 4915a6386..f6d41eb71 100644
+--- a/drivers/Kconfig
++++ b/drivers/Kconfig
+@@ -113,6 +113,8 @@ source "drivers/video/Kconfig"
+ 
+ source "drivers/accel/Kconfig"
+ 
++source "drivers/rknpu/Kconfig"
++
+ source "sound/Kconfig"
+ 
+ source "drivers/hid/Kconfig"
+diff --git a/drivers/Makefile b/drivers/Makefile
+index 8e1ffa435..82ed17463 100644
+--- a/drivers/Makefile
++++ b/drivers/Makefile
+@@ -67,6 +67,10 @@ obj-y				+= iommu/
+ # gpu/ comes after char for AGP vs DRM startup and after iommu
+ obj-y				+= gpu/
+ 
++# rknpu registers a classic DRM device (not drivers/accel/) -- must come
++# after gpu/ for the same reason (DRM core needs to be ready first).
++obj-$(CONFIG_ROCKCHIP_RKNPU)	+= rknpu/
++
+ obj-$(CONFIG_CONNECTOR)		+= connector/
+ 
+ # i810fb depends on char/agp/