proof/: all 23 Isabelle theory files now verify under Isabelle2025-2

Isabelle toolchain replaced (was genuinely 2011, 14+ years stale) and every
theory file fixed to actually compile -- most had apparently never been
checked under a working Isabelle at all. Fixed the vm_state self-reference
in StarForth_Base.thy properly (word_table is now a free-standing global
constant, not a circular record field), corrected the word_physics_transparent
axiom (was claiming full state equality from mere exec-equivalence, provably
too strong), and worked through 14 years of HOL-Library drift plus several
missing-hypothesis bugs across the physics-loop and ACL theories.

Two genuine (non-tactical) bugs found and left oops-flagged rather than
silently resolved: forth_roll's index arithmetic disagrees with both its own
test lemma and the real C ROLL implementation (three-way inconsistency), and
pm_wf isn't actually preserved by pm_record_hit/pm_record_miss. Both need a
decision, not a proof-script fix.

Full writeup in FABRIC-2.md item 5.2.

proof/ACL_TTL_Bounded.thy

@@ -57,7 +57,7 @@ definition acl_ttl_compute :: "nat \<Rightarrow> nat" where
 (* Lower bound: result is always ≥ ACL_BASE_TTL.                           *)
 lemma acl_ttl_compute_ge_base:
   "acl_ttl_compute heat \<ge> ACL_BASE_TTL"
-  by (simp add: acl_ttl_compute_def ACL_BASE_TTL_def)
+  by (simp add: acl_ttl_compute_def ACL_BASE_TTL_def ACL_MAX_TTL_def)
 
 (* Upper bound: result is always ≤ ACL_MAX_TTL.                            *)
 lemma acl_ttl_compute_le_max: