009: Polish bacon fixes, OTA host scripts, and migration docs.

Restore disable_configstore, EuiccDisabler and thermal CDEV guards, branding
and rebuild/sync helpers; document device roles, laptop migration, and Gitea.

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/008-009-design.md

@@ -1,9 +1,13 @@
 # Design: native call-recording unlock + FLAG_SECURE override (`008`/`009`)
 
 **Date**: 2026-09-16  
-**Status**: Approved by owner (requirements); Spec Kit feature
+**Status**: Landed via Magisk `009` ship pack (2026-10). Spec:
 `specs/008-call-rec-flag-secure/`  
-**LAB only**: `11231JEC207477`. No Magisk/LSPosed/Zygisk for these features.
+**LAB only**: `11231JEC207477`.
+
+> **Scope note:** “No Magisk/LSPosed/Zygisk” applies to **these two native
+> toggles** (they are ROM Settings/framework). It does **not** mean the ROM
+> ships without Magisk — Magisk preroot is a separate `009` requirement.
 
 ## Problem