接续上一轮，先做 L4-USER-M-PROCESS，完全接入仿真系统

结论：已将 L4-USER-M-PROCESS 的 millturn M128/M129 受控状态转换接入 virtual HAL、真实 browser simulation、OPFS 会话 payload、SDK API 和 release diagnostics validation；外部 user-M process execution 与 promotion 仍保持 locked，不伪装为 native process 解锁。

wasm-port/runtime/ui/simulation/simulation-app.js

@@ -22,6 +22,7 @@ export {
 export {
   VIRTUAL_HAL_AXES,
   VIRTUAL_HAL_AXISUI_PINS,
+  VIRTUAL_HAL_MILLTURN_USER_M_PROCESS_BOUNDARY,
   VIRTUAL_HAL_MOTION_CONTROLLER_MATRIX_FIXTURES,
   VIRTUAL_HAL_SIM_CONFIG_MACRO_LOAD_AUDIT_CANDIDATES,
   VIRTUAL_HAL_SIM_CONFIG_MACRO_LOAD_BLOCKED_FIXTURES,
@@ -32,6 +33,7 @@ export {
   VIRTUAL_HAL_SIMULATION_REPLACEMENT_TARGETS,
   VIRTUAL_HAL_SIMULATION_RUNTIME_CAPABILITIES,
   applyVirtualHalAction,
+  applyVirtualHalMillturnUserMProcessState,
   applyVirtualHalPinUpdates,
   cloneVirtualHalState,
   createLinuxCncVirtualHalRuntime,
@@ -41,6 +43,7 @@ export {
   createVirtualHalIntegrityReport,
   createVirtualHalLimitsHomeState,
   createVirtualHalMachineStatusState,
+  createVirtualHalMillturnUserMProcessBoundaryReport,
   createVirtualHalPinRegistry,
   createVirtualHalSimConfigEvidenceExpansionReport,
   createVirtualHalSimConfigMacroLoadFixtureReport,