BitBox02 firmware

pip: fix editable imports for pip >= 25

Pip versions >=25 changed editable install behavior per PEP 660, causing
relative imports like "from .bitbox02 import common" to resolve to the outer
init.py instead of the inner subpackage, breaking dev workflows.
Re-exporting symbols from the nested bitbox02 module fixes this resolution
issue while preserving the existing package structure and API for downstream
users.
This ensures pip install -e . works reliably without flattening.

add securechip_model to securechip HAL

add monotonic_increments_remaining to securechip HAL

add attestation_sign to securechip HAL

HAL/SecureChip: add kdf()

Due to copy_seed and copy_bip39_seed needing kdf, a ton of functions
are infected by the HAL param, as so many of them transitively make
use of these functions.

hww: add change password workflow

Currently, changing the device password requires a full device reset
and restoration from a backup. This process is cumbersome and increases
the risk of user error or seed exposure during the restoration process.

This patch introduces a native "Change Password" workflow that allows
the user to rotate their device password without resetting the device.

The workflow:
1. Forces the user to re-enter the current password for security, even
if the device is already unlocked.
2. Prompts for the new password (entered twice).
3. Re-encrypts the stored seed and BIP39 entropy with the new password
using the Secure Chip for key stretching.

The implementation ensures that the wallet identity (Root Fingerprint
and BIP39 seed) is preserved, so the device remains paired and
functional with the same accounts (including passphrase) after the
password change.

Firmware v9.24.0 verification

Signed-off-by: Yasser Aziza <yasser@posteo.net>

HAL: add stretch_password to SecureChip HAL

HAL: use SecureChip event counter

Proactivly replace calls wherever we have a HAL instance, so these
tests will not fail later when the code starts using the SecureChip HAL.

HAL: add initial SecureChip HAL

port test_memory_functional C tests to Rust

test_get_attestation_bootloader_hash is dropped as it's redundant with
the other more involved test that was ported.

rust/memory: unit test encrypted_seed_and_hmac

ci: Improve simulators CI

keystore: remove unused Error variants

keystore: move Error from bitbox02 crate to bitbox02-rust crate

Not needed there anymore as it's not mapping to any C error anymore.

keystore: remove inline testing fixture by using HAL

remove src/cipher C functions

Unused since moving keystore_unlock to Rust.

keystore: port keystore_unlock to Rust

keystore: remove unused extern "C" function

simulator-graphical: Initial commit

bitbox02-sys: sort allowlists

keystore: remove remaining_attempts out param from keystore_unlock

Use `keystore::get_remaining_unlock_attempts()` instead. This
simplifies the unlock function and porting it to Rust. It also would
allow showing the remainng attempts left before unlock too (e.g. if
there are only a few tries remaining).

keystore: add get_remaining_unlock_attempts()

To simplify keystore_unlock() later.

keystore: more consistent treatment of keystore_unlock errors

Before, the device would be reset right after the 10th wrong
password. However, if there was any other error during unlock (e.g. a
securechip error) that is not caused by a wrong password, the device
would not be reset immediately, but at the start of the next unlock
attempt.

This commit unifies all error treatment, leading to a device reset
right away.

The alternative is to decrement the counter on any error other than
incorrect password, but that would drastically change the behavior of
the unlock function, and we'd rather be conservative here.

screen: remove warning about unused param

In testing, the `duration` param is unused.