009: Polish bacon fixes, OTA host scripts, and migration docs.

Restore disable_configstore, EuiccDisabler and thermal CDEV guards, branding
and rebuild/sync helpers; document device roles, laptop migration, and Gitea.

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/003-build-notes.md

@@ -1,5 +1,10 @@
 # 003 — Build notes (LOS 23.2 sunfish vanilla)
 
+> Vanilla bring-up **done** 2026-09-14. For Magisk ship rebacon after a new
+> LOS sync, use [`009-upstream-rebase-ota.md`](009-upstream-rebase-ota.md) and
+> `scripts/009-bacon-axp-stage1-combo4-cve-hi-releasekeys.sh` — not a bare
+> `mka bacon` from this note alone.
+
 **Host:** `rom-dev01` as `android-build`  
 **Tree:** `/srv/rom/src/lineage`  
 **Artifacts:** `/srv/rom/artifacts/003-…`