009: Magisk ship pack through US-S5-1 + US-S4 OpenSSH/Jelly/Gallery2.

Release-keys/AVB, CVE clean+hi batches, Yama/slabrand, Pro branding,
bundled apps, and AXP-class product surface docs/scripts.

vendor/sunfish-a16/patches/009-kernel-hardening/cve-high-offset-batch2.list

@@ -0,0 +1,10 @@
+# High-offset sunfish batch2 (after batch1 BOOT_OK #48). Elevated CVE_MAX_ABS_OFFSET=9999.
+# Prefer mm/sched/sysctl/f2fs/wifi/driver-core; skip nf_tables-style (missing helpers).
+CVE-2022-49641/ANY/0001.patch
+CVE-2023-52707/^6.2/0001.patch
+CVE-2023-53594/ANY/0001.patch
+CVE-2023-53709/ANY/0001.patch
+CVE-2024-40917/^6.10/0001.patch
+CVE-2024-56569/ANY/0001.patch
+CVE-2025-21909/ANY/0001.patch
+CVE-2025-38218/ANY/0001.patch