Added
- BLE provisioning now fails on non-LR4 devices. The serial is validated up
front (must be theLR4…form; normalized to the label's uppercase), and after
connecting the provisioner verifies the device exposes the LR4 provisioning
GATT service before writing anything — closing the--addresspath that
previously accepted an arbitrary BLE address.