Secure OTA Bootloader

Signature-verified, rollback-protected A/B partitioned over-the-air update infrastructure.

Update images are ECDSA-signed; the bootloader verifies the signature at boot and automatically falls back to the previous slot on failure.