009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.

vendor/sunfish-a16/branding.mk

@@ -0,0 +1,13 @@
+# AXP Resurection Pro product / OTA identity (009).
+#
+# "Pro" marks the full Magisk-resurrection track (not a future slim/minimal
+# variant). GOLDEN used releasetype PRO + ro.lineage.version=…-sunfish-pro.
+#
+# TARGET_UNOFFICIAL_BUILD_ID is set in vendor/extra/product.mk (early Lineage
+# hook, before version.mk). BoardConfig + this file are not early enough alone.
+# Ship scripts also publish AXP-Resurection-Pro-*.zip from lineage-*.zip.
+
+# Identity props (not axp.os endpoints). Empty on GOLDEN for ro.axp.version —
+# local track marker only.
+PRODUCT_PRODUCT_PROPERTIES += \
+    ro.axp.resurection.track=pro