009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.

docs/009-axp-pro-product-apps-20260324.md

@@ -0,0 +1,54 @@
+# AXP.OS PRO sunfish product/app surface — 20260324 zip
+
+Oracle: `AXP.OS-22.2-20260324-PRO-sunfish.zip` (`payload.bin` → partitions).
+Extracted 2026-10-02 (local `payload-dumper-go`). Authoritative for **debloat**
+vs Lineage product defaults — not the disroot `upstream_*` lineage mirror.
+
+## `product/app` (present)
+
+Aperture, ApertureLensLauncher, Backgrounds, Camelot, DeskClock,
+ExactCalculator, LatinIME, LocalContactsBackup, ModuleMetadata, PhotoTable,
+Recorder, ThemesStub, Twelve, messaging, uimremoteclient, uimremoteserver
+
+## `product/app` (absent vs typical LOS product)
+
+| LOS / our prior ship | AXP PRO |
+|----------------------|---------|
+| Jelly | **absent** (browser stub on system_ext) |
+| Gallery2 | **absent** (Fossify only) |
+| Etar | **absent** (uses `Etar_ER` on system_ext) |
+| AuroraStore / Droidify / Fossify | not on product — on **system_ext** |
+| VZWAPNLib / PixelCameraServices* | absent here (device packs may differ) |
+
+## `product/priv-app`
+
+Contacts, Dialer, SettingsIntelligence
+
+## `product/bin`
+
+**No** `/bin` tree (no sshd/ssh/rsync). `etc/init/init.openssh.rc` **present**.
+
+## `system_ext/app` (bundled AXP extras)
+
+AuroraStore, Etar_ER, F-Droid, FossifyGallery_FD, GsfProxy_GH,
+MicrogGmsCore_GH_presigned, Profiles, AccessibilityMenu,
+QtiTelephonyService, SimpleSettingsConfig,
+`noDefaultBrowserWebView`, `noeSpeakNG`
+
+## `system_ext/priv-app` (selected)
+
+AOSLauncher (NeoLauncher — **wont** for 009), AOSmium_webview64
+(**exception** — we ship LOS WebView), OpenEUICC_AXP-OS, Seedvault,
+TrebuchetQuickStep, Updater, Lineage*, Settings, SystemUI, ims, …
+
+## 009 mapping
+
+| AXP | Our ship policy |
+|-----|-----------------|
+| AuroraStore | product `AuroraStore` (already) |
+| F-Droid | **Droidify** substitute (owner) |
+| FossifyGallery_FD | product `FossifyGallery` + override Gallery2 |
+| noDefaultBrowserWebView | **US-S4-2**: drop Jelly |
+| Gallery2 absent | **US-S4-2**: ensure Gallery2 gone (override alone left dir) |
+| NeoLauncher / Aosmium | wont / exception — keep Launcher3 + LOS WebView |
+| OpenSSH bins | US-S4-1 done |