[green] derive fixed V4 SLOs by source ancestry

Turn the ADR-0037/ADR-0038 performance RED green without weakening it.

Bench (tests/firmware_tests/hil/_pble_bench.py):

- DERIVATION advances to the frozen replacement identifiers
  fixed-profile-product-slo-esp3000-pico7000-v4 and
  fixed-product-slo-64k-under-10s-6600-v3; the retired v0.5.1 schema-2
  identity is frozen as V051_DERIVATION so historical policies keep
  validating unchanged.
- derive_thresholds now yields the fixed product SLOs: reset-to-service
  3000 ms on the four ESP profiles, 7000 ms on rpi-pico2-w, and the
  uniform 6600 B/s PUT/GET floors (ceil_100(65536/10 s)); static and
  heap arithmetic is untouched.  derive_thresholds and
  evaluate_thresholds accept an optional profile_id that must agree with
  the build resource kind; the OI runner passes --profile through both.

Release tool (firmware/scripts/release_bundle.py):

- QUALIFICATION_DERIVATION_V4 joins the registry; V1-V3 stay frozen.
  The ADR-0038 identities V060_SUPERSEDED_SOURCE_BOUNDARY (5620f2f) and
  V060_ABANDONED_CANDIDATE_SOURCE (719b211) are exported.
- _qualification_derivation_for_source selects by the bound source
  commit's git ancestry: a strict descendant of the boundary is the
  replacement era (V4); the boundary and its ancestors keep the
  historical version-routed derivation; unknown, unrelated, diverged, or
  unprovable ancestry fails closed via git merge-base.
- _derived_qualification_thresholds accepts the selected derivation and
  profile_id; the V4 branch applies the fixed SLOs, never baseline
  extrema.  Version routing without a bound checkout is unchanged for
  every pre-0.6.0 era; a v0.6.0 policy without checkout context admits
  both era shapes and is narrowed to the exact era wherever the source
  checkout is known (_load_qualification_policy, assemble, HIL binding
  against the committed policy).
- assemble_oi1_baseline and _validate_qualification_policy/-baseline
  thread the ancestry-selected era end to end.

Policy (firmware/qualification/oi1-gates.json):

- Mechanically regenerated from the immutable retained a8be631 baseline
  (sha256 8a7dbf32..., byte-identical) using the tool's own
  _qualification_derivation_for_source + _derived_qualification_thresholds
  + _canonical_json_bytes: exactly 11 numeric fields change (Pico reset
  3000 -> 7000, all ten PUT/GET floors -> 6600) plus the two derivation
  identifiers.  New identity: 5,015 bytes, sha256
  b9b19ddc217598835185429d6d1f1da60bb3a504a447e32dcdeae15bf18bd0c5.
  Full checkout revalidation (_load_qualification_policy) passes.

Witnessed green: test_oi1_profile_bench (78 OK), test_oi1_rp2_profile_bench
(15 OK), test_release_v060_contract (12 OK), the C3 policy pin in
test_target_runtime_contract, plus historical/bench/release/lifecycle/
finalization/lineage/no-leak/SPDX/sha-drift collateral all green.  The
amended C3 NVS receipt RED (step 5) remains red for exactly its
missing-receipt reasons.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CAVghCmvKjF4BZFBUjAMwc
Signed-off-by: Viwat Vchirawongkwin <viwat.v@chula.ac.th>

Author: yyods

firmware/qualification/oi1-gates.json

@@ -6,8 +6,8 @@
   "derivation": {
     "application_headroom": "factory-minus-application-v1",
     "application_image": "exact-byte-identical-two-root-v1",
-    "boot_ceiling": "fixed-product-slo-3000-v3",
-    "goodput_floor": "floor-95pct-min-100-v2",
+    "boot_ceiling": "fixed-profile-product-slo-esp3000-pico7000-v4",
+    "goodput_floor": "fixed-product-slo-64k-under-10s-6600-v3",
     "heap_floor": "floor-min-1024-v1"
   },
   "profile_order": [
@@ -26,11 +26,11 @@
         "application_headroom_min_bytes": 315360,
         "application_image_max_bytes": 1716256,
         "gc_free_min_bytes": 108544,
-        "get_verified_goodput_min_bytes_per_second": 12500,
+        "get_verified_goodput_min_bytes_per_second": 6600,
         "idf_internal_free_min_bytes": 81920,
         "idf_internal_largest_block_min_bytes": 55296,
         "idf_internal_minimum_free_min_bytes": 81920,
-        "put_committed_goodput_min_bytes_per_second": 6500,
+        "put_committed_goodput_min_bytes_per_second": 6600,
         "reset_to_service_advertisement_max_ms": 3000
       },
       "transport": {
@@ -48,11 +48,11 @@
         "application_headroom_min_bytes": 384064,
         "application_image_max_bytes": 1713088,
         "gc_free_min_bytes": 8317952,
-        "get_verified_goodput_min_bytes_per_second": 19700,
+        "get_verified_goodput_min_bytes_per_second": 6600,
         "idf_internal_free_min_bytes": 177152,
         "idf_internal_largest_block_min_bytes": 102400,
         "idf_internal_minimum_free_min_bytes": 177152,
-        "put_committed_goodput_min_bytes_per_second": 13000,
+        "put_committed_goodput_min_bytes_per_second": 6600,
         "reset_to_service_advertisement_max_ms": 3000
       },
       "transport": {
@@ -70,11 +70,11 @@
         "application_headroom_min_bytes": 377024,
         "application_image_max_bytes": 1720128,
         "gc_free_min_bytes": 8316928,
-        "get_verified_goodput_min_bytes_per_second": 24300,
+        "get_verified_goodput_min_bytes_per_second": 6600,
         "idf_internal_free_min_bytes": 177152,
         "idf_internal_largest_block_min_bytes": 102400,
         "idf_internal_minimum_free_min_bytes": 177152,
-        "put_committed_goodput_min_bytes_per_second": 12900,
+        "put_committed_goodput_min_bytes_per_second": 6600,
         "reset_to_service_advertisement_max_ms": 3000
       },
       "transport": {
@@ -92,11 +92,11 @@
         "application_headroom_min_bytes": 352880,
         "application_image_max_bytes": 1678736,
         "gc_free_min_bytes": 117760,
-        "get_verified_goodput_min_bytes_per_second": 27200,
+        "get_verified_goodput_min_bytes_per_second": 6600,
         "idf_internal_free_min_bytes": 66560,
         "idf_internal_largest_block_min_bytes": 57344,
         "idf_internal_minimum_free_min_bytes": 63488,
-        "put_committed_goodput_min_bytes_per_second": 15300,
+        "put_committed_goodput_min_bytes_per_second": 6600,
         "reset_to_service_advertisement_max_ms": 3000
       },
       "transport": {
@@ -114,9 +114,9 @@
         "firmware_bin_max_bytes": 848216,
         "firmware_image_headroom_min_bytes": 724648,
         "gc_free_min_bytes": 433152,
-        "get_verified_goodput_min_bytes_per_second": 6800,
-        "put_committed_goodput_min_bytes_per_second": 12200,
-        "reset_to_service_advertisement_max_ms": 3000
+        "get_verified_goodput_min_bytes_per_second": 6600,
+        "put_committed_goodput_min_bytes_per_second": 6600,
+        "reset_to_service_advertisement_max_ms": 7000
       },
       "transport": {
         "link_facts_kind": "btstack-observed-v1",