Bank-0 byte-pattern JMP/JSR target scan; kernel entry now decoded

The first fix candidate from iter 33's queue was a fixed-point bank-0 walker: collect bank-0's own branch_targets after each pass and re-seed.

Raw traces, ROM material, local paths, and personal data are not part of this public record.