Updates and signing

Plugin / commd OTA

Installer on 8682 accepts application packages and verifies their SHA-256 digest. Release packages may also carry a signature for verification with the installed Beechat release certificate.

Rollback: previous binary restored if health check fails. Interrupted plugin updates have recovery state in installer code.

Full image

r24: write a new SD or use USB flashing. r30: use USB flashing. If power is interrupted, restart the procedure through USB ROM recovery (maintenance).