nx_spore_syscalls.nx

nx_spore_syscalls.nx -- the SPORE's minimal syscall surface. The full nx_syscalls.nx carries ~40 wrappers (socket/connect/sendto/execve/ fork/getdents/clock...) -- everything the MATURE system eventually needs. The SPORE needs only the six to verify a piece and measure itself, and a NishiLang build links the whole imported module (no dead-code elimination yet), so a spore that imported the full surface dragged ~6 KB of wrappers it never calls. This is the architecturally-correct bootstrap: the spore carries the SMALLEST syscall surface that lets it (a) read bytes, (b) verify them, (c) know its own footprint. The richer surface (networking, processes, dirs) arrives as later SEED pieces, germinated through the same trust gate. Additive: this does NOT modify the protected shared nx_syscalls.nx. Dual-target (RV64 default / x86_64 under --target) preserved exactly.