Add APIs required by runtime host qualification

[TorinKS]

Summary

This branch collects only WinKernelLite API gaps discovered while compiling unchanged HeimsGuardRuntime legacy kernel tests through the simulator.

Current additions:

• publish the WDK STATUS_NOT_FOUND value from NtStatus.h
• publish the WDK STATUS_INSUFFICIENT_RESOURCES value from NtStatus.h
• add focused public-header contract tests for both exact bit patterns
• unblock shared process-identity and module-registration code that returns these statuses

Further APIs will be added only when a migrated legacy test produces a concrete RED compile or runtime failure.

Validation

• Debug: full runTests suite passed
• Release: full runTests suite passed
• focused NtStatusContractTest.* cases are included in both configurations