proof/: all 23 Isabelle theory files now verify under Isabelle2025-2

Isabelle toolchain replaced (was genuinely 2011, 14+ years stale) and every
theory file fixed to actually compile -- most had apparently never been
checked under a working Isabelle at all. Fixed the vm_state self-reference
in StarForth_Base.thy properly (word_table is now a free-standing global
constant, not a circular record field), corrected the word_physics_transparent
axiom (was claiming full state equality from mere exec-equivalence, provably
too strong), and worked through 14 years of HOL-Library drift plus several
missing-hypothesis bugs across the physics-loop and ACL theories.

Two genuine (non-tactical) bugs found and left oops-flagged rather than
silently resolved: forth_roll's index arithmetic disagrees with both its own
test lemma and the real C ROLL implementation (three-way inconsistency), and
pm_wf isn't actually preserved by pm_record_hit/pm_record_miss. Both need a
decision, not a proof-script fix.

Full writeup in FABRIC-2.md item 5.2.

proof/ACL_Emergency_Bypass.thy

@@ -91,7 +91,7 @@ lemma denied_word_permitted_under_zuse:
 lemma either_bypass_sufficient:
   "(emergency_console vm = True \<or> zuse_session vm = True) \<Longrightarrow>
    acl_check_permits vm e = True"
-  by (simp add: acl_check_permits_def)
+  by (auto simp: acl_check_permits_def)
 
 (* Without either bypass, the word's own acl_allow is definitive.         *)
 lemma no_bypass_check_follows_allow: