- BinarySemaphorePosix: Replace delay() stub with pthread_cond_timedwait
- doLightSleep: Add 30 second default parameter, matching THIRTY_SECONDS_MS
- main_matrix.yml: Fetch branches before merge-base to fix shame job failure

Replace FreeRTOS-specific pdTRUE macro with literal 1 for compatibility
with native/POSIX builds that don't have FreeRTOS headers.

- Create PhoneAPIModule to handle packet delivery to phone/API clients
- Move phone delivery logic from RoutingModule to dedicated module
- Add PhoneAPIModule as friend class to MeshService for handleFromRadio access
- Update ESP-IDF deprecation comment to note existing version-conditional handling
- Register PhoneAPIModule in Modules.cpp

Reverting meshtastic#6 (PhoneAPIModule) due to concerns about behavioral changes.
Keeping meshtastic#8 (ESP-IDF deprecation comment fix) which is safe.

- Add ARCH_PORTDUINO guard to use pthread only on Linux/native
- Keep stub implementation for STM32 and other non-POSIX platforms
- Fixes CI failure on rak3172 build

Use origin/ prefix for both base and head branches in git merge-base.
The branches are fetched as remote refs, not local branches.

The gh run download command does not support --commit flag.
Changed to use gh run list --commit to find the run ID first,
then download using that run ID. Added fallback for cases where
no workflow run exists for the merge base commit.

Fixes 'Not a valid object name' error by:
1. Adding explicit git fetch of base branch before merge-base
2. Using gh run list to find valid run ID before download
3. Adding graceful fallback when no previous artifacts exist

Adds ephemeral key exchange using Triple-DH for forward secrecy when both
nodes support it. Falls back to standard PKI encryption for compatibility
with stock firmware.

Key features:
- EphemeralKeyManager: generates/rotates Curve25519 ephemeral key pairs
- Triple-DH session key derivation for mutual auth + forward secrecy
- Key rotation after 100 messages or 24 hours
- LRU cache for remote ephemeral keys (32 entries)
- Persistence to flash with checksum validation
- Graceful fallback to legacy PKI if PFS unavailable

…creenInfo)

…anly

…rypt

…ad of symmetric derivation

- Remove non-existent Led.h and RAKled.h includes
- Remove ledBlinker() and ledPeriodic (replaced by StatusLEDThread in upstream)
- Restore RadioInterface *rIf = NULL global
- Add missing upstream includes: RadioLibInterface.h, TransmitHistory.h,
  power/PowerHAL.h, MessageStore.h (HAS_SCREEN)
- Add clearKeys() declaration to CryptoEngine.h to match .cpp definition
- Remove ARCH_PORTDUINO guard from RadioLibHAL (now always global)

- Remove duplicate UserButtonThread definition (canonical in InputBroker.cpp)
- Remove duplicate radioType definition (canonical in RadioInterface.cpp)
- Fix router->addInterface() to use unique_ptr<RadioInterface> (upstream API change)
- Capture getPacketTime() before ownership transfer to avoid null dereference

- QMC6310 -> QMC6310U + QMC6310N (enum has two variants, not a bare QMC6310)
- PMSA0031 -> PMSA003I (typo: trailing digit '1' should be letter 'I')