introduce a stable NTL_DDK driver ABI to replace direct HAL_API and kernel-header access in drivers, add code/kernel/io_ddk.c and code/public/ntlite/ddk/ headers, change DriverEntry to take (const NTL_DDK*, NTL_DRIVER_INIT*), update kmain to build the DDK once via IoInitializeDdk/IoGetDdk and hand it to both boot and runtime drivers, downgrade code/public/ntlite/ddi/io_driver.h to a legacy I/O model header pulling from ntlite/ddk instead of kernel internals, move code/third_party/lwip into code/drivers/net/lwip/third_party, fix up lwip_sources.txt and build.c include paths to match, split build.c's single CFLAGS macro into COMMON/KERNEL/USER/BOOT/DRIVER cflags.

code/public/ntlite/ddi/io_driver.h

@@ -1,7 +1,7 @@
-// Public NTLite io driver ABI declarations shared between kernel, drivers, and user mode.
+// Public nt-lite legacy I/O driver declarations.
 
 #pragma once
-// io_driver.h - kernel driver/device I/O model
+// io_driver.h - legacy kernel driver/device I/O model.
 
 // Device lifetime is owned by the I/O manager. Bus drivers create PDOs,
 // function/filter drivers attach FDOs, and PnP/remove IRPs tear stacks down.
@@ -12,13 +12,9 @@
 #include <stddef.h>
 #include <ntlite/status.h>
 #include <ntlite/string_view.h>
-#include <kernel/ob_object.h>
-#include <kernel/ke_list.h>
-#include <kernel/ke_spinlock.h>
-#include <kernel/ke_irp.h>
-
-typedef struct HAL_API HAL_API;
-typedef KSTATUS (*DRIVER_ENTRY_FN)(const HAL_API* hal);
+#include <ntlite/ddk/object.h>
+#include <ntlite/ddk/irp.h>
+#include <ntlite/ddk/driver.h>
 typedef void    (*DRIVER_UNLOAD_FN)(void);
 
 typedef struct DRIVER_OBJECT DRIVER_OBJECT;