init: crash recovery instead of kernel panic
Don't exec ac-native as PID 1 — run it as a child process in a loop.
If ac-native crashes (segfault, abort, etc.):
- Paint solid red screen to framebuffer as visual crash indicator
- Write crash.json with exit code and timestamp
- Auto-restart after 3s (up to 5 times)
- Clean exit (code 0) triggers poweroff
Previously, ac-native WAS init (PID 1), so any crash caused a kernel
panic (blinking caps lock, frozen screen, no recovery).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>