DMA2D syscalls

[cepetr]

This PR moves DMA2D operations entirely into the kernel. Applications must now use new syscalls instead of directly accessing the DMA2D peripheral. This change enhances security at the cost of some extra CPU cycles due to syscall overhead (approximately 3 microseconds per syscall).

Additionally, the new DMA2D syscalls, along with the existing display syscalls, have improved verifiers so that unprivileged applications cannot pass invalid pointers or coordinates in the bitblt structure.

A few final optimizations were completed in 36b866f, but there is still room for further improvements (e.g., replacing HAL_DMA2D_xxx calls with our own implementation).

On most screens, the impact on final framerate is negligible. However, on a few screens with intensive drawing - such as a homescreen with five concentric circles - the drawing time can increase significantly (from 15ms to 23ms in case of the homescreen). This change has no visible effect since we already missed the 60Hz framerate deadline before the change, maintaining a framerate of 30Hz both before and after.

resolves #4206 and #4273

[github-actions]

core UI changes	device test	click test	persistence test
T2T1 Model T	test(screens) main(screens)	test(screens) main(screens)	test(screens) main(screens)
T3B1 Safe 3	test(screens) main(screens)	test(screens) main(screens)	test(screens) main(screens)
T3T1 Safe 5	test(screens) main(screens)	test(screens) main(screens)	test(screens) main(screens)
All	main(screens)