Ship script gates wave 4 behind AXP_DEBLOB_WAVE4, documents secrets cert path, and adds deblob appliers plus tests; docs capture Swissquote fix and parity. Co-authored-by: Cursor <cursoragent@cursor.com>
005 sigspoof patches
Idempotent apply script for rom-dev01 LOS 23.2 tree.
python3 vendor/sunfish-a16/patches/005-sigspoof/apply_005_sigspoof.py
Requires /srv/rom/artifacts/005-spoofing/phonesky-cert.hex (DER hex of
project Phonesky signer).
See docs/005-spoofing-runbook.md.