scaffold: aports overlay, build script, CI workflow, README

Kernel aport forked from pmaports 7.1.2-r0, repointed at milos-linux
combined-stable with the tested FP6 config (+EFI_ZBOOT for packaging);
imsd + nftables aports from the pending pmaports submission. build.sh
carries TODO(validate) markers - not yet run end-to-end.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

aports/device/linux-postmarketos-qcom-milos/APKBUILD

@@ -0,0 +1,90 @@
+# Fork of pmaports device/testing/linux-postmarketos-qcom-milos (7.1.2-r0),
+# overlaid via pmbootstrap so it shadows the upstream aport. Differences:
+# source is the Catcrafts combined-stable branch (upstream v7.1.2-milos tag +
+# the FP6 bring-up carries), and the config is the exact one the development
+# FP6 runs, plus CONFIG_EFI_ZBOOT for the packaging below.
+maintainer="Jorijn van der Graaf <jorijnvdgraaf@catcrafts.net>"
+_flavor="postmarketos-qcom-milos"
+pkgname=linux-$_flavor
+pkgver=7.1.2
+# always sorts above the upstream aport (r0..r99)
+pkgrel=100
+pkgdesc="Milos mainline kernel + Catcrafts FP6 bring-up carries (combined-stable)"
+arch="aarch64"
+_carch="arm64"
+url="https://forgejo.catcrafts.net/Catcrafts/milos-linux"
+license="GPL-2.0-only"
+options="!strip !check !tracedeps
+	pmb:cross-native
+	pmb:kconfigcheck-community
+	pmb:kconfigcheck-uefi
+	"
+makedepends="
+	bison
+	clang
+	elfutils-dev
+	findutils
+	flex
+	installkernel
+	linux-headers
+	lld
+	llvm
+	openssl-dev
+	pahole
+	perl
+	python3
+	zstd
+"
+
+_config="config-$_flavor.$arch"
+# Pinned by CI: the instance has source archives disabled, so the tarball is
+# generated with git-archive (prefix milos-linux/) from combined-stable and
+# placed next to this APKBUILD before `pmbootstrap checksum` runs. See
+# build.sh at the repository root.
+_commit="REPLACED_BY_CI"
+
+source="
+	milos-linux-$_commit.tar.gz
+	0001-resolve_btfids-preserve-tag-and-parameter-names-when.patch
+	$_config
+"
+builddir="$srcdir/milos-linux"
+
+prepare() {
+	default_prepare
+	cp "$srcdir/config-$_flavor.$arch" .config
+}
+
+build() {
+	unset LDFLAGS
+	make ARCH="$_carch" LLVM=1 \
+		KBUILD_BUILD_VERSION="$((pkgrel + 1 ))-$_flavor"
+}
+
+package() {
+	# ZBOOT EFI decompressor for EFI booting
+	install -Dm644 "$builddir/arch/$_carch/boot/vmlinuz.efi" \
+		"$pkgdir/boot/linux.efi"
+
+	# Old GZIP'd kernel image for boot.img compatibility
+	install -Dm644 "$builddir/arch/$_carch/boot/vmlinuz" \
+		"$pkgdir/boot/vmlinuz"
+
+	make modules_install dtbs_install \
+		ARCH="$_carch" \
+		LLVM=1 \
+		INSTALL_PATH="$pkgdir"/boot/ \
+		INSTALL_MOD_PATH="$pkgdir"/usr \
+		INSTALL_MOD_STRIP=1 \
+		INSTALL_DTBS_PATH="$pkgdir"/boot/dtbs
+	rm -f "$pkgdir"/lib/modules/*/build "$pkgdir"/lib/modules/*/source
+
+	install -D "$builddir"/include/config/kernel.release \
+		"$pkgdir"/usr/share/kernel/$_flavor/kernel.release
+}
+
+sha512sums="
+REPLACED_BY_CI  milos-linux-REPLACED_BY_CI.tar.gz
+4e705e038a91466a86fc5317b0028c2220aa1e7a4807e5d86db2f9ac815a927c59666a8f21ed50c4632147d3ce183d8042378a76f95341dbcd3db1047faf39e3  0001-resolve_btfids-preserve-tag-and-parameter-names-when.patch
+REPLACED_BY_CI  config-postmarketos-qcom-milos.aarch64
+"