std: restructure — std/ modules, namespace tail, std/xml.sx

allocators/fs/process/socket/log/trace/test move under modules/std/
(allocators.sx becomes std/mem.sx; the Allocator protocol moves into
the std.sx prelude, impls stay in mem.sx). New std/xml.sx holds
xml_escape as xml.escape. std.sx gains the carried namespace tail —
flat-importing std.sx now also provides mem./xml./log. — with the
remaining modules (fs/process/socket/json/cli/hash/test) deferred from
the tail until the global last-wins maps are fully own-wins (pulling
them into every closure collides bare names corpus-wide; they stay
direct imports: modules/std/fs.sx etc.). log.sx's internal emit
renamed log_emit (it clobbered consumer fns named emit program-wide).
bundle.sx uses xml.escape via the carried alias. Consumer import paths
swept mechanically; .ir snapshots recaptured for the larger std
closure. m3te + game build unchanged.

library/modules/gpu/gles3.sx

@@ -21,7 +21,7 @@
 //     the Metal backend takes — caller branches on OS).
 
 #import "modules/std.sx";
-#import "modules/allocators.sx";
+#import "modules/std/mem.sx";
 #import "modules/compiler.sx";
 #import "modules/opengl.sx";
 #import "modules/gpu/types.sx";

library/modules/gpu/metal.sx

@@ -7,7 +7,7 @@
 // non-iOS targets don't reach the Metal-touching code paths.
 
 #import "modules/std.sx";
-#import "modules/allocators.sx";
+#import "modules/std/mem.sx";
 #import "modules/std/objc.sx";
 #import "modules/compiler.sx";
 #import "modules/gpu/types.sx";