v1.1.3

Shared-UI polish for the /setup and /console pages, from dragon-core v0.6.1.

Changed

• /setup shows only the selected control source. Instead of listing every source
  (Klipper/Moonraker, Bambu, HA, Klipper-MQTT) at once, the setup surface now reveals
  only the section for the configured ctl_src — changing the selector reveals the
  chosen source live. Home Assistant stays always-visible, since it carries over as
  read-only telemetry alongside any control source. (Product sections tagged with
  visible_when; dc_ui honors it — dragon-core #13.)
• Re-pinned dragon-core v0.6.0 → v0.6.1.

Fixed

• /console no longer prompts for a control token on presence-only devices. The
  page now sends a non-empty auth header by default, so a device with no control token
  configured loads the log without a spurious prompt; only a real 403 prompts. (Core
  dc_portal, dragon-core #13.)

Install (no USB — recommended): on the stock Panda web UI ("Firmware Update"), upload dragonbreath-v1.1.3.bin. It installs as an app through the stock firmware's own OTA — the stock bootloader/partitions stay in place, so you can revert to Panda later over WiFi.
Update / revert (already on DragonBreath): upload dragonbreath-v1.1.3.bin via /fw; to return to Panda, upload your stock backup's app image via /fw.
Recovery only (USB): from a source checkout, python3 tools/flash.py (backs up stock first). The full/factory image is not published — build it locally if you need it.

Alpha/beta testers: if your unit was USB-flashed, restore your stock backup first, then install this via the stock updater — a stock-layout install can't be reached by OTA from a native-layout one.

asset	purpose
dragonbreath-v1.1.3.bin	application image — install via stock's OTA, or update/revert via /fw
manifest.json	provenance (source SHA, ESP-IDF, vendored-core) + per-artifact SHA-256
SHA256SUMS.txt	sha256sum -c SHA256SUMS.txt