009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.

scripts/009-bisect-ksync-pstore-alt-plain.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+# Channel-proof build (no FORTIFY): diag v4 early_ioremap + ioremap after mm_init.
+# Validate (docs/009-fortify-diag-capture-plan.md v4 — mid/late only):
+#   0) Wipe first 4K of access-ramoops or fresh attempt id
+#   1) Flash boot-make.img, boot, adb root
+#   2) Milestone: strings | grep AXPDIAG0  (early_map / perm_map / mm_init)
+#   3) ONLY SysRq-c (no SysRq-x)
+#   4) Recover combo4 — complete AXPDIAG1,C,<attempt>,0x...,sysrq-c
+# Does NOT prove pre-early_map FORTIFY coverage. Do not flash v3.
+set -euo pipefail
+export PSTORE_ALT_PLAIN=1
+exec /srv/rom/artifacts/009-axp-los23-port/scripts/009-bisect-ksync-one.sh \
+  pstore-alt-plain