Audit follow-through: runbook, bench tools, recipes, release tooling

BRINGUP describes the present: the 54-test catalog and its seven-test
always core, the tier counts, the shipped low-temperature gates, the
density floor ($35 = 10), the two local core commits, the ffboot env
write, the aa-offset route, the current bench image, and the bench
measurements the audit asks for (pooled into the next session). The
workstation shell notes and every em dash are gone.

forgetest: the takeover waits for the cloud client too (found by its
command line); the unauthenticated /boot probe names the endpoint's
parameter; the UI prose is American English. Recipes: forgetest
fetches its package directory and init script only and drops
__pycache__ at unpack; the dev image no longer re-adds forgectrl; the
release image's remove list drops the gfui-client the BSP no longer
has; the platform identity strips the kernel's local-version hash
from the modules directory name, so a re-patched kernel keeps its
fingerprints. grblhal restart is stop then start. release.sh --dev
packs the dev image. fixture.sh refuses a readable env file.

Bench tools: the live-fire drills measure the lid-IR baseline before
every run and point at the fire-watch thresholds the engine reads;
one thermistor conversion (gfbench.degc) serves every drill; the six
dated measurement records leave the tool directory; feeder.c names the
two sysfs writes its caller makes.

Host tests: forgetest 258 pass; the coverage lint reports no uncovered
path across 54 tests. Acceptance: forgectrl.auth covers the /boot
probe; update.* cover ffboot and the manifest identity; the runbook
and bench-tool changes have no catalog consequence.

kas/forgefirm-glowforge.yml

@@ -1,5 +1,5 @@
 # ============================================================================
-# ForgeFIRM — kas build configuration  (factory Glowforge control board)
+# ForgeFIRM - kas build configuration  (factory Glowforge control board)
 # ============================================================================
 # The forgefirm repo is the BASE: it controls the build, the output firmware
 # images land here (build/tmp/deploy/images/glowforge/), and the status docs
@@ -31,10 +31,10 @@ target: forgefirm-image
 
 # kas uses KAS_WORK_DIR (the dir you run kas from = the forgefirm repo root).
 # Upstream layers are cloned into ./layers/, the build runs in ./build/, and
-# caches go in ./downloads + ./sstate-cache — all gitignored, all inside forgefirm.
+# caches go in ./downloads + ./sstate-cache - all gitignored, all inside forgefirm.
 repos:
 
-  # --- This repo (forgefirm) — auto-detected, no url/path needed -------------
+  # --- This repo (forgefirm) - auto-detected, no url/path needed -------------
   forgefirm:
     layers:
       meta-forgefirm:
@@ -73,7 +73,7 @@ repos:
     layers:
       .:
 
-  # --- meta-openglow — Glowforge BSP layers ---------------------------------
+  # --- meta-openglow - Glowforge BSP layers ---------------------------------
   # Referenced as a local sibling checkout (no url => kas performs no git ops,
   # so in-place BSP edits are what gets built). The kernel-module-glowforge
   # sources are NOT a layer; the kernel-module-glowforge.bb recipe fetches them
@@ -98,14 +98,14 @@ repos:
 # local.conf additions
 # ----------------------------------------------------------------------------
 local_conf_header:
-  # Accept the NXP/Freescale firmware EULA — required to unpack firmware-imx
+  # Accept the NXP/Freescale firmware EULA - required to unpack firmware-imx
   # (i.MX SDMA/VPU firmware blobs) pulled in by the i.MX6 BSP. ForgeFIRM targets
   # the factory i.MX6 Glowforge board, so this firmware is intrinsic to the image.
   eula: |
     ACCEPT_FSL_EULA = "1"
 
   # The kernel defaults to linux-fslc 6.12 in conf/machine/glowforge.conf
-  # (with the factory drivers forward-ported — EPIT/SDMA/OV5648/glowforge.ko —
+  # (with the factory drivers forward-ported - EPIT/SDMA/OV5648/glowforge.ko  - 
   # see the site, Developers, "Build"). This explicit pin is redundant but harmless.
   kernel: |
     PREFERRED_PROVIDER_virtual/kernel = "linux-fslc"