009: Polish bacon fixes, OTA host scripts, and migration docs.

Restore disable_configstore, EuiccDisabler and thermal CDEV guards, branding
and rebuild/sync helpers; document device roles, laptop migration, and Gitea.

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/009-swissquote-investigation-20261009.md

@@ -1,9 +1,12 @@
 # Swissquote differential investigation — 2026-10-09
 
-Status: **failure classified, underlying root-detection signal not yet isolated**.
-Live observations approximately 15:18–15:26 Europe/Berlin. This supersedes
-the Swissquote runtime inventory in `009-handoff-20261008.md`, not its
-build/recovery instructions. No firmware was flashed and GOLDEN was read-only.
+> **Outcome (same day, wave 3):** Swissquote **PASS** in Island on LAB after
+> Lineage tools removal — see [`009-closure-parity-20261009.md`](009-closure-parity-20261009.md).
+> Body below is the **pre-PASS** forensics log only.
+
+Status (investigation snapshot): failure classified before wave 3.
+Live observations approximately 15:18–15:26 Europe/Berlin. Build/recovery
+instructions in `009-handoff-20261008.md` still apply. GOLDEN was read-only.
 
 ## Confirmed new finding