Bump recipe pins to the audit-remediation heads

forgectrl aa99d30, grblHAL-glowforge e74f53f, and the forgefirm-app
sources at python3-gfhardware c9d602a (PV 0.1.3) - the Phase 1-9
remediation work, pushed and pinned.

meta-forgefirm/recipes-forgefirm/forgectrl/forgectrl.bb

@@ -9,7 +9,7 @@ PV = "0.1.0"
 
 SRC_URI = "git://github.com/ScottW514/forgectrl.git;protocol=https;branch=main"
 # Pinned; bump deliberately after pushing forgectrl changes.
-SRCREV = "e779554fa3bc1d4232a7b708a97a007198c57bd7"
+SRCREV = "aa99d307f353b2f2dcfba2a076f03b5417f919cc"
 
 S = "${WORKDIR}/git"
 

meta-forgefirm/recipes-forgefirm/forgefirm-app/forgefirm-app.inc

@@ -8,11 +8,11 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=62f8bb455fcc4bf177ecab380f71cd5d"
 
 SRC_URI = "git://github.com/ScottW514/python3-gfhardware.git;protocol=https;branch=master"
 # Pinned; bump deliberately (AUTOREV is not reproducible).
-SRCREV = "7a4973bc9add9cc6f356335669b282fcd7bf7aeb"
+SRCREV = "c9d602a0295e9d888e728c118f1830069f6a3522"
 
 # Bump PV with every SRCREV move: the hash-derived package version is not
 # monotonic on its own and buildhistory QA fails the build when it sorts
 # backwards.
-PV = "0.1.2+git"
+PV = "0.1.3+git"
 
 S = "${WORKDIR}/git"

meta-forgefirm/recipes-forgefirm/grblhal-glowforge/grblhal-glowforge.bb

@@ -11,7 +11,7 @@ PV = "0.1.0"
 # upstream).
 SRC_URI = "gitsm://github.com/ScottW514/grblHAL-glowforge.git;protocol=https;branch=main"
 # Pinned; bump deliberately after pushing grblHAL-glowforge changes.
-SRCREV = "e6165487be47d028185214016bd82a544f90ea7e"
+SRCREV = "e74f53f0b13edf039b58432bda56bcf8281d84f9"
 
 SRC_URI += "file://grblhal.init"