Coordinate Reader output with Morse and enforce HIL flash safety

Preserve Reader streaming during Morse timing and block synchronous inflate/progress interleaving. Fail closed on uncertain port ownership and enforce application-only DFU packages before querying USB. Cover the guards in CI and clarify experimental benchmark scope.

.github/workflows/run-unit-tests.yml

@@ -341,6 +341,7 @@ jobs:
           python3 -B test/test_morse_auth.py -v
           python3 -B test/test_morse_reply_handoff.py -v
           python3 -B test/test_morse_remote.py -v
+          python3 -B test/test_morse_hil_safety.py -v
           python3 -B test/test_morse_loop_policy.py -v
           python3 -B test/test_morse_terminal_input.py -v
           python3 -B test/test_radio_profile_cli.py