Release a dead process's device claims (M17.1)

Every path out of a process (exit, fault, kill) now releases its device
claims alongside its IRQ and MSI bindings, so a restarted driver can claim
its hardware again — the cleanup half of process-lifecycle.md's iron rule 1.
MSI vectors were already swept by irq.releaseOwner; claims were the gap.
The claim-release test proves kill -> release -> re-claim, plus the broker
release in isolation.

docs/m17-m18-plan.md

@@ -29,7 +29,9 @@ only when its definition of green holds.
 - [x] **Phase 0** — baseline: docs committed, feat/usb merged to main, pushed;
       `usb-xhci-libary.zig` renamed to `usb-xhci-library.zig`; existing QEMU
       suite green from the worktree (48/48, 2026-07-12).
-- [ ] **M17.1** — kernel releases claims/MSI on death (branch `feat/process-lifecycle`)
+- [x] **M17.1** — kernel releases claims/MSI on death (claims: `releaseAllOwnedBy`
+      in the reap; MSI was already swept by `irq.releaseOwner`; `claim-release`
+      test; suite 49/49)
 - [ ] **M17.2** — exit reasons
 - [ ] **M17.3** — published exit events + VFS subscriber
 - [ ] **M17.4** — signals, timer notifications, `runtime.process`, the service harness