Merge pull request #1020 from PierreGode/ci/release-token-write-probe

fix(ci): token validation now really verifies Contents: write

Merge pull request #1021 from PierreGode/fix/hardware-rebind-recovery

fix(auth): recover from a hardware-fingerprint change without reinstalling (#1002)

Merge pull request #1008 from PierreGode/feature/dns-poison-v9

feat(net): DNS Watch v9 — SPF/libspf2 parser tier + TCP stream reasse…

Merge pull request #1008 from PierreGode/feature/dns-poison-v9

feat(net): DNS Watch v9 — SPF/libspf2 parser tier + TCP stream reasse…

Merge pull request #1000 from PierreGode/fix/kiosk-chromium-window-size

fix(kiosk): openbox on Kali + update self-heal + default-on first boot + hot-plug display re-detect

Merge pull request #1000 from PierreGode/fix/kiosk-chromium-window-size

fix(kiosk): openbox on Kali + update self-heal + default-on first boot + hot-plug display re-detect

Merge pull request #998 from PierreGode/fix/posture-tls-and-ansi

fix+feat(ulfberht): posture TLS/ANSI fixes + first-class wireless engagements

Merge pull request #998 from PierreGode/fix/posture-tls-and-ansi

fix+feat(ulfberht): posture TLS/ANSI fixes + first-class wireless engagements

Merge pull request #983 from PierreGode/fix/kiosk-pwn-apt-confold

fix(ulfberht): kiosk + pwnagotchi install on the Kali base (chroot-deferred dpkg, py3.14 lgpio)

Merge pull request #974 from PierreGode/fix/rfkill-boot-unblock

fix(boot): unblock radios at every boot (rfkill) on both images