introduce a stable NTL_DDK driver ABI to replace direct HAL_API and kernel-header access in drivers, add code/kernel/io_ddk.c and code/public/ntlite/ddk/ headers, change DriverEntry to take (const NTL_DDK*, NTL_DRIVER_INIT*), update kmain to build the DDK once via IoInitializeDdk/IoGetDdk and hand it to both boot and runtime drivers, downgrade code/public/ntlite/ddi/io_driver.h to a legacy I/O model header pulling from ntlite/ddk instead of kernel internals, move code/third_party/lwip into code/drivers/net/lwip/third_party, fix up lwip_sources.txt and build.c include paths to match, split build.c's single CFLAGS macro into COMMON/KERNEL/USER/BOOT/DRIVER cflags.

code/drivers/storage/ahci/ahci_port.c

@@ -10,7 +10,7 @@ KSTATUS ahci_map_mmio(uint64_t physBase, uint64_t length) {
     uint64_t pageEnd = (physBase + length + PAGE_SIZE - 1u) & ~(uint64_t)(PAGE_SIZE - 1u);
     int pageIndex = 0;
     for (uint64_t phys = pageBase; phys < pageEnd; phys += PAGE_SIZE, pageIndex++) {
-        uintptr_t   virt  = (uintptr_t)g_hal->PhysToVirt(phys);
+        uintptr_t   virt  = (uintptr_t)gAhciDdk->Memory->PhysToVirt(phys);
         uint64_t    flags = PAGE_PRESENT | PAGE_WRITE | PAGE_NOCACHE;
         KSTATUS     st    = MmPteMapPage(virt, phys, flags, MmPteMapFailIfPresent);
         // Ignore NTLSTATUS_ALREADY_EXISTS - a prior mapping with different flags