Cross-jail USER varsym namespace sharing (per-UID not per-jail)

Summary

VARSYM_USER varsyms stored in cr_uidinfo->ui_varsymset keyed by UID shared across jails. Two jailed procs same UID different jails can read/write each others USER varsyms. sys_varsym_set(:164-166) marked XXX check jail. Documented known gap.