Cleanup: Re-established TEST01 from stable baseline

- Implemented surgical instruction-level patches for Tier 0x20 forcing (Map Zoom unlock)
- Established ORIGINALS/ quarantine folder for unpatched firmware baseline
- Added cryptographic manifest.sha256 for original binaries
- Verified ESP32 image integrity for all RC4 targets

firmware/ORIGINALS/manifest.sha256

@@ -0,0 +1,3 @@
+5066e5d9fcae5f4e995bd6174014b6ff7fbaffcfc775eece82798c29a475807a  MeshOS-TDeck-1.1.8-merged.bin
+d4b5eeff58ea5103961b82d0bbc1f4dff434c579f0031522a9790e226b10383a  Ultra-TDeck-v9.2.bin
+d77e98cd62c38fd21ff39cfcd9901963c87291563273cff7c1f08caebd08bc98  Ultra-TDeck-v9.2-merged.bin

verify_patches.py

@@ -50,29 +50,29 @@ if __name__ == "__main__":
 
     targets = [
         (
-            "Ultra Standalone",
+            "Ultra Standalone-MOD",
             os.path.join(PATCHED_DIR, "Ultra-TDeck-v9.2.patched.bin"),
             ultra_patches,
         ),
         (
-            "Ultra Merged",
+            "Ultra Merged-MOD",
             os.path.join(PATCHED_DIR, "Ultra-TDeck-v9.2-merged.patched.bin"),
             [(n, o + 0x10000, e, p) for n, o, e, p in ultra_patches],
         ),
         (
-            "MeshOS Standalone",
+            "MeshOS Standalone-MOD",
             os.path.join(PATCHED_DIR, "MeshOS-TDeck-1.1.8.patched.bin"),
             meshos_patches,
         ),
         (
-            "MeshOS Merged",
+            "MeshOS Merged-MOD",
             os.path.join(PATCHED_DIR, "MeshOS-TDeck-1.1.8-merged.patched.bin"),
             [(n, o + 0x10000, e, p) for n, o, e, p in meshos_patches],
         ),
     ]
 
     all_passed = True
-    print("=== Firmware Patch Verification Harness ===")
+    print("=== T-Deck-MOD Firmware Patch Verification Harness ===")
     for label, path, p in targets:
         print(f"\n{label}:")
         report = check_binary(path, p)