introduce a stable NTL_DDK driver ABI to replace direct HAL_API and kernel-header access in drivers, add code/kernel/io_ddk.c and code/public/ntlite/ddk/ headers, change DriverEntry to take (const NTL_DDK*, NTL_DRIVER_INIT*), update kmain to build the DDK once via IoInitializeDdk/IoGetDdk and hand it to both boot and runtime drivers, downgrade code/public/ntlite/ddi/io_driver.h to a legacy I/O model header pulling from ntlite/ddk instead of kernel internals, move code/third_party/lwip into code/drivers/net/lwip/third_party, fix up lwip_sources.txt and build.c include paths to match, split build.c's single CFLAGS macro into COMMON/KERNEL/USER/BOOT/DRIVER cflags.

code/drivers/net/lwip/lwip_sys_arch.c

@@ -5,19 +5,19 @@
 #include <stdbool.h>
 #include <string.h>
 #include <intrin.h>
-#include <ntlite/ddi/hal_api.h>
+#include <ntlite/ddk/ddk.h>
 #include <lwip/opt.h>
 #include <lwip/sys.h>
 #include <lwip/err.h>
 
-#include <kernel/mm_virt.h>
-#include <kernel/ob_object.h>
-#include <kernel/ke_debug.h>
-#include <kernel/ke_sched.h>
-#include <kernel/ke_thread.h>
-#include <kernel/ke_semaphore.h>
-#include <kernel/ke_spinlock.h>
-#include <kernel/ke_irql.h>
+#include <ntlite/ddk/memory.h>
+#include <ntlite/ddk/object.h>
+#include <ntlite/ddk/debug.h>
+#include <ntlite/ddk/scheduler.h>
+#include <ntlite/ddk/thread.h>
+#include <ntlite/ddk/semaphore.h>
+#include <ntlite/ddk/sync.h>
+#include <ntlite/ddk/irql.h>
 
 #define LWIP_PORT_MBOX_DEFAULT_SIZE 128u