introduce a stable NTL_DDK driver ABI to replace direct HAL_API and kernel-header access in drivers, add code/kernel/io_ddk.c and code/public/ntlite/ddk/ headers, change DriverEntry to take (const NTL_DDK*, NTL_DRIVER_INIT*), update kmain to build the DDK once via IoInitializeDdk/IoGetDdk and hand it to both boot and runtime drivers, downgrade code/public/ntlite/ddi/io_driver.h to a legacy I/O model header pulling from ntlite/ddk instead of kernel internals, move code/third_party/lwip into code/drivers/net/lwip/third_party, fix up lwip_sources.txt and build.c include paths to match, split build.c's single CFLAGS macro into COMMON/KERNEL/USER/BOOT/DRIVER cflags.

code/drivers/bus/usb/usb.c

@@ -3,7 +3,7 @@
 #include "usb.h"
 
 DRIVER_OBJECT gXhciDriver;
-const HAL_API* gUsbHal;
+const NTL_DDK* gUsbDdk;
 
 static const IO_DEVICE_ID gXhciIds[] = {
     { IoBusPci, { "PCI\\CC_0C0330", sizeof("PCI\\CC_0C0330") - 1 } },
@@ -35,10 +35,11 @@ static KSTATUS UsbInitializeXhciDriver(void) {
 }
 
 // Implements the driver Entry operation.
-KSTATUS DriverEntry(const HAL_API* hal) {
-    if (!hal) return NTLSTATUS_INVALID_PARAMETER;
+KSTATUS DriverEntry(const NTL_DDK* ddk, NTL_DRIVER_INIT* init) {
+    (void)init;
+    if (!ddk || !ddk->Memory || !ddk->Memory->PhysToVirt || !ddk->Timer) return NTLSTATUS_INVALID_PARAMETER;
     DbgPrint("usb: driver loading\n");
-    gUsbHal = hal;
+    gUsbDdk = ddk;
 
     KSTATUS st = UsbInitializeBusModel();
     if (!KSUCCESS(st)) {