009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.

vendor/sunfish-a16/patches/009-kernel-hardening/cve-high-offset-batch1.list

@@ -0,0 +1,9 @@
+# High-offset sunfish batch1 (fuzz=0 spot-checked). Applied with CVE_MAX_ABS_OFFSET=9999
+# after cve-clean-offset. Dropped CVE-2023-3777: nft_chain_is_bound missing on 4.14.
+CVE-2020-29372/^5.7/0001.patch
+CVE-2021-47209/^5.15/0001.patch
+CVE-2022-50246/ANY/0001.patch
+CVE-2023-53669/ANY/0001.patch
+CVE-2024-40954/^6.10/0001.patch
+CVE-2024-50186/^6.12/0001.patch
+CVE-2024-43879/^6.10/0001.patch