feat: add permission consent prompts, drop permitted capability mask

kernel/src/Api/Process.hpp

@@ -144,7 +144,6 @@ namespace montauk::abi {
     static int Sys_GetCaps(SpawnCapabilities* out) {
         auto* proc = Sched::GetCurrentProcessPtr();
         if (proc == nullptr || out == nullptr) return -1;
-        out->permitted = proc->permittedCaps;
         out->effective = proc->effectiveCaps;
         out->delegable = proc->delegableCaps;
         return 0;
@@ -214,7 +213,6 @@ namespace montauk::abi {
             }
             buf[count].heapUsed = Sched::g_allocatedPages[i] * 0x1000;
             buf[count].cpuTimeMs = proc->cpuTimeMs;
-            buf[count].permittedCaps = proc->permittedCaps;
             buf[count].effectiveCaps = proc->effectiveCaps;
             buf[count].delegableCaps = proc->delegableCaps;
             count++;