FABRIC-3.md: version correction -- LITHOS_VERSION back to 2.0.0, plus a rename-gap fix

LITHOS_VERSION 2.0.1 was premature: per this project's own versioning
policy, 2.0.1 claims SER5 hardware-track progress (RDRAND backend +
thumbdrive image) that was never actually verified on real hardware --
that verification is FABRIC-3.md's own open topic. Reset to 2.0.0
(still a QEMU-only release, correctly). Verified 3-arch boot shows
"LithosAnanke v2.0.0" in each serial log directly, not assumed from the
Makefile edit alone.

Also closes a real gap found in today's earlier FABRIC-series rename:
Makefile.starkernel, Kconfig.kernel, scripts/bleach_zuse_img.sh, four
proof/*.thy files, and isr.S were never swept -- the original file list
only matched *.md/*.c/*.h/*.4th, silently skipping every other
extension. Fixed with the same safe placeholder substitution.
.claude/settings.local.json's historical permission-grant log and
ClaudeEXPORT/'s frozen export were deliberately left untouched.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019YcT3H2PQeyujrzjqS3Var

Makefile.starkernel

@@ -72,7 +72,7 @@ endif
 
 # Version
 # Roadmap (per docs/lithosananke/ROADMAP.md "Release Versioning Policy" and
-# FABRIC-3.md §G — X.0.0 = QEMU release, X.5.0 = hardware bare-metal release):
+# FABRIC-2.md §G — X.0.0 = QEMU release, X.5.0 = hardware bare-metal release):
 #   v1.0.x — serial-only production (released)
 #   v1.5.x — framebuffer VT100 terminal/console milestone (released)
 #   v2.0.0 — QEMU release (even major = LTS): three-arch QEMU story complete
@@ -80,7 +80,7 @@ endif
 #   v2.2.0 — amd64 bare-metal (Beelink SER5) — see ROADMAP "Board-by-board rollout"
 #   v2.5.0 — hardware bare-metal release: real per-arch RNG + real-board boot
 VERSION       ?= 3.1.0
-LITHOS_VERSION ?= 2.0.1
+LITHOS_VERSION ?= 2.0.0
 
 # ==============================================================================
 # BUILD PATHS
@@ -133,7 +133,7 @@ MKCAPSULE_SRC       = tools/mkcapsule.c tools/pkcs8_ed25519.c \
                       src/starkernel/crypto/sha512.c
 MKCAPSULE_BIN       = $(BUILD_DIR)/tools/mkcapsule
 # Milestone 6 (Phase 8): the snakeoil intermediate's private key, generated
-# offline outside this repo entirely (see FABRIC-3.md's Phase 8 §Milestone 6
+# offline outside this repo entirely (see FABRIC-2.md's Phase 8 §Milestone 6
 # writeup) -- not present in CI or a fresh checkout, so signing is skipped
 # gracefully ($(wildcard ...) below) rather than failing the build. Override
 # with `make SIGN_KEY=/path/to/key.pem ...` on a machine that holds it.
@@ -227,7 +227,7 @@ LOADER_LD ?= $(LD)
 #   has no dynamic linker to populate a GOT, so those reads silently returned
 #   NULL. PLATFORM_TIME_NO_INLINE (removed 2026-08-06) was a symbol-specific
 #   workaround for the same underlying bug, made unnecessary once amd64 got
-#   the real fix; see FABRIC.md for the write-up).
+#   the real fix; see FABRIC-0.md for the write-up).
 COMMON_CFLAGS := \
     -std=c99 -Wall -Werror -Wextra \
     -O2 -U_FORTIFY_SOURCE \