[ZeldaMaster501]

Summary

Make payload selection fail closed on exact firmware identity instead of matching only the device model.

• Requires support-manifest schema v4.
• Matches model, exact kernelRelease, and exact Android buildId.
• Applies the same checks to manual target selection.
• Supports per-profile exploit-attempt limits and fresh-P0-session requirements.
• Adds unit tests for exact matching and mismatch rejection.
• Runs unit tests before producing the debug APK in CI.

Why

On SM-S928U / S928USQS6DZG1, the legacy model-only feed can select the older DZF2 payload. That mismatch has already caused device crashes. This change prevents the app from downloading or running a payload unless the full firmware identity matches.

Dependency / deployment order

This PR depends on payload PR BuSung-dev/Root-My-Galaxy-Payloads#195 and must be merged only after that payload/feed PR is available on the payload repository's main branch.

The exact DZG1 profile remains hardware-unvalidated; the companion payload PR intentionally limits it to one attempt and a fresh P0 session.

[ZeldaMaster501]

No description provided.

[ZeldaMaster501]

Currently traveling and had Codex work on a POC for my device's firmware. Did not realize that it had decided to open a pull request on the main repository. I'll reopen this pull request and or create a new one if this actually works on my device.