fix(bootstrap): simple enum codegen, crypto parser compatibility, import ordering

- Fix bootstrap sema to type simple enum variants as the enum itself
  (not _Tag), and .tag access returns the enum type.
- Fix hir_lower to lower simple enum .tag as no-op and Enum{tag:X}
  init as X directly.
- Fix sema collectGlobals to register imports AFTER real declarations,
  preventing duplicate-symbol errors when stdlib files import symbols
  defined in later files (e.g. jwt.bux importing rsa.bux).
- Rewrite lib/crypto/*.bux as single-line to work around bootstrap
  parser limitations with multi-line function calls.
- Rename 'pub' -> 'pubBuf' in ed25519.bux and jwt-pitbul/Main.bux
  to avoid reserved keyword collision.
- Remove algTag:int workaround from jwt-pitbul/Main.bux; enum
  comparisons now type-check without manual casts.
- Update .gitignore to exclude _test_*/ and backup files.
- Delete accidentally-committed _test_array/ directory.

apps/jwt-pitbul/src/Main.bux

@@ -91,11 +91,9 @@ func ParseAlg(name: String) -> JwtAlg {
 // Resolve key — for RSA/ECDSA, read PEM file; for HMAC/EdDSA, pass through
 // =============================================================================
 func ResolveKey(alg: JwtAlg, keyArg: String) -> String {
-    let algTag: int = alg.tag;
-
     // RSA and ECDSA: key is a path to PEM file
-    if algTag == JwtAlg_RS256 || algTag == JwtAlg_RS384 || algTag == JwtAlg_RS512 ||
-       algTag == JwtAlg_ES256 || algTag == JwtAlg_ES384 {
+    if alg.tag == JwtAlg_RS256 || alg.tag == JwtAlg_RS384 || alg.tag == JwtAlg_RS512 ||
+       alg.tag == JwtAlg_ES256 || alg.tag == JwtAlg_ES384 {
         if bux_file_exists(keyArg) != 0 {
             let pem: String = bux_read_file(keyArg);
             if pem as uint != 0 && String_Len(pem) > 0 {
@@ -118,8 +116,7 @@ func ResolveKey(alg: JwtAlg, keyArg: String) -> String {
 // Check if algorithm is symmetric (HMAC) or asymmetric
 // =============================================================================
 func IsSymmetric(alg: JwtAlg) -> bool {
-    let t: int = alg.tag;
-    return t == JwtAlg_HS256 || t == JwtAlg_HS384 || t == JwtAlg_HS512;
+    return alg.tag == JwtAlg_HS256 || alg.tag == JwtAlg_HS384 || alg.tag == JwtAlg_HS512;
 }
 
 // =============================================================================
@@ -210,13 +207,13 @@ func CmdDecode(token: String) -> int {
 // =============================================================================
 func CmdKeygen(keyType: String) -> int {
     if String_Eq(keyType, "ed25519") {
-        let pub: *void = bux_alloc(32);
+        let pubBuf: *void = bux_alloc(32);
         let priv: *void = bux_alloc(32);
-        if !Ed25519_Keypair(pub, priv) {
+        if !Ed25519_Keypair(pubBuf, priv) {
             PrintLine("ERROR: Ed25519 key generation failed (OpenSSL 1.1.1+ required)");
             return 1;
         }
-        let pubB64: String = bux_base64_encode(pub as String, 32);
+        let pubB64: String = bux_base64_encode(pubBuf as String, 32);
         let privB64: String = bux_base64_encode(priv as String, 32);
         PrintLine("Ed25519 keypair (base64):");
         Print("  Public:  ");