kernel: migrate _PULP dir/subdir ops to sd()
* delete 7 remaining KernelHandle forwarding methods:
read_app_data_start, write_app_data, ensure_app_subdir,
read_app_subdir_chunk, write_app_subdir, append_app_subdir,
file_size_app_subdir
* migrate ~30 app callsites across home, settings, reader,
images, cover_cache, stats to k.sd().method() form
* PULP_DIR is now explicit at callsites that previously hid
it behind read_app_data_start/write_app_data wrappers
Co-authored-by: Claude <noreply@anthropic.com>