lib: retire os.assert/abort shims — assert/abort are builtins (#58 respell)

The flat checker scope makes ANY decl named assert/abort anywhere in
the combined unit disable the builtin unit-wide (the #45 shadow shape:
scope_lookup_prefer's cross-module fallback finds it). lib carried
three colliding @symbol("rt_abort") shims (os, time, strconv/stof)
plus the os.assert wrapper, so a bare assert(cond) in ANY program
importing os mis-bound os.assert and failed arity — a hard blocker for
regex fold-5 (regex.ha:660/670 bring builtin-assert mass). Ruled
respell-now per the recurrence test (#45 -> #58).

Delete the shims and the os.assert wrapper; every bare abort(msg)
caller (regex, strings, utf8, hash, getopt, encoding/*, time, stof)
now lands on the builtin, and the ~40 os.assert(c, m) sites respell to
the builtin assert(c, m) — restoring the exact Hare spelling the lib
ports diverged from (e.g. ref/hare/bytes/tokenize.ha:23). os.assert
had no Hare counterpart (Hare's assert is a language builtin); rule-9
wrapper removed. temp/dirs/bufio already use the non-colliding rtabort
spelling and keep it.

Now-dead 'import os;' lines kept (pre-existing precedent:
lib/strconv/strconv.ww carries one); a tree-wide dead-import sweep is
a separate concern. regex.ww's if+abort workarounds citing #58 stay
for the fold-5 owner to fold back into assert.

combined.ww regenerated for all five selfhost tools + the smoke
fixture via make.

examples/lisp/lispcore.ww

@@ -378,8 +378,8 @@ export fn intern(s: str) i32 = {
 		if (streqid(s, sym_off[i], sym_len[i])) { return i; };
 		i += 1;
 	};
-	os.assert(sym_count < SYM_CAP, "sym table full");
-	os.assert(sym_blobuse + s.len <= SYM_BLOBSZ, "sym blob full");
+	assert(sym_count < SYM_CAP, "sym table full");
+	assert(sym_blobuse + s.len <= SYM_BLOBSZ, "sym blob full");
 	let off: i32 = sym_blobuse;
 	let j: i32 = 0;
 	for (j < s.len) {