009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.

docs/009-localization-axp-vs-los.md

@@ -0,0 +1,22 @@
+# 009 localization / location: AXP vs LOS (deferred — FR-018)
+
+**Status**: Look later — **not** an MVP acceptance gate.
+
+Owner note (2026-09-17): AXP has historically felt aggressive on localization /
+location; want a deliberate compare vs stock LineageOS before cloning that
+policy blindly.
+
+## What to compare later
+
+| Area | AXP / GOLDEN | Stock LOS 23 | Decision TBD |
+|------|--------------|--------------|--------------|
+| Network location / NLP backends | microG BeaconDB path (see `004`/`005` docs) | LOS + microG defaults | |
+| Location permission defaults | | | |
+| Privacy toggles / sensors | | | |
+| Extra lockdown patches | | | |
+| UX: “how much it capea” | Owner complaint baseline | | |
+
+## Until then
+
+Do **not** invent extra location lockdown beyond what the rest of the AXP clone
+already implies. Matrix row = `deferred`.