Blockstream Jade

build: add 'tools/switch_to.sh' to switch between different configs

Preferred to adding more sdkconfig.default files.

log: added CONFIG_LOG_CBOR (default off) to control logging via jade serial API

docs: add security caveat and @DarkNavyOrg thanks to changelog

build: only check hashes that are present

build: only generate deltas that are 1/2 the firmware size or less

build: increment the firmware secure version

Update CHANGELOG.md

remove qr guide icons and draw qr guide directly

Update CHANGELOG.md

usb: refactor usb handling

- Simplify the USB caller interface down to start() and stop().
- Simplify the internal state machine to a single loop
- Remove multiple synchronization primatives in favour of a single mutex
- Prevent freezing when JTAG and logging are both enabled
- Remove UI-based logging support
- Load the next data block while the current one is processing
- Time-out if ota_data messages are not forthcoming
- Reduce stack usage

Co-authored-by: Daniel Newton <dnewton@blockstream.com>

ci: include sdkconfig.defaults in firmware build artifacts

change name of usb_connected() to usb_is_powered()

ota: share error handling code

Attempt to be more careful about replying without a current message or
replying to a given message twice.

ota: make user validation set the ota and confirmation status

This makes confirmation status easier to reason about as it is only set
in one place after ota_init().

Following this, it is clear that if the decompressed data callback is initially
called with less than the full custom header, then user validaton will
never be called. Document the code that catches this case and how it can
happen.

ota: ensure error replies are sent if firmware sizes mismatch

If ota_complete is not seen, return directly. This code path does not
set an error into the context, and so never enters the cleanup code.

ota: initial refactor of ota processing

Push all state into the ota context struct, allocate it from the heap
and free it consistently on process exit. Use the context to simplify
error handling rather than forcing callers to maintain their own external
context variables.

Share the initial message processing and ota setup code between the
full and delta ota tasks since its almost completely identical.

ota: make finalization set the ota status

ota: perform the happy path processing in ota_finalize()

ota: add missing jumps to cleanup code

usb: use usbstorage_register_callback to unregister

ota: remove write-through pointer members from ota context struct

We are already writing through the context pointer, the extra
indirection uses more stack with no benefit.

usb: restore the previous activity before running a usbstorage action

usb: avoid memory allocations for ota chunk data

Prevents fragmentation.

usb: avoid stdio overhead and buffering when reading ota data

usb: refactor the ota data loop

- Allow parallelism by waiting on the previous data packet not the current one
- Handle scenarios where the ota process stops responding to our messages
- Clean up error handling to simplify the loop logic.