Fix packet, delivery, clock and radio stability regressions

Reject truncated anonymous reply paths and advert metadata before copying,
while preserving timestamp-only empty-password logins. Limit room posting to
read-write/admin ACL roles, retain inbox frames until the requesting transport
accepts them, and lock raw LittleFS traversal against concurrent writes.

Separate ISR event generations from main-loop radio state. Confirm RX/TX IRQs,
detach concrete wrapper callbacks safely, and discard inconsistent LR2021 FIFO
snapshots before rearming. Preserve bridge RX frames through packet-pool
exhaustion and bound ESP-NOW retries and missing-callback recovery. Screen RTC
register layouts without losing DS1307 startup, and ignore poisoned future
contact timestamps during clock bootstrap.

Keep the nRF52 loop stack at 8 KiB while reducing the OTA listing call chain
from 7,832 to 6,056 static bytes. Retain all target names through lossless Full
Companion compression and the canonical size optimizer. Preserve constrained
STM32 filesystems and bind corrected ESP32 UART/OLED budgets to source size
assertions. Document the separately measured preexisting W12 package limits.

Adapted for this branch from meshcore-dev/MeshCore PRs #3521, #3340, #3362,
#2062, #3503, #3038, #3534, #3544 and #3512.

Validation: 1,829 native tests; sanitized parser, inbox, LittleFS, ACL, clock,
RTC, IRQ/FIFO and bridge fault tests; 332 additional Companion cases; real
RAK4631 Full and both repeater profiles, G2 Full/standard, V3 Full and both
constrained STM32 release recipes. Radio-family compile coverage continues
separately; W12 full/portable package guards remain enforced.

scripts/check_firmware_ram.py

@@ -68,12 +68,13 @@ def requirements(platform, defines, target):
     if combined_rak_ethernet and (platform != "NRF52_PLATFORM"
                                  or not {"RAK_4631", "ETHERNET_ENABLED", "OTA_RAK_AUTO_STORE"}.issubset(defines)):
         raise ValueError("combined RAK Ethernet budget requires RAK4631 adaptive nRF52 storage")
-    if combined_rak_ethernet and display == "SSD1306Display":
+    if (combined_rak_ethernet or platform == "ESP32_PLATFORM") and display == "SSD1306Display":
         # The fixed 128x64 driver allocates one 1024-byte framebuffer and
         # reuses it after power cycling. Its linked source assertion binds
         # framebuffer + complete driver object + allocator overhead to 2 KiB.
-        # The actual linked ARM driver is 156 bytes; it is already static,
-        # so including it here again retains a conservative allocation bound.
+        # The driver is already linked as a global (124 bytes on ESP32), so
+        # including it again retains a conservative allocation bound. Other
+        # display drivers and ordinary non-ESP32 policies are unchanged.
         display_heap = 2048
     if platform == "NRF52_PLATFORM":
         parts["loop_and_callback_stacks"] = integer(defines, "MESH_NRF52_LOOP_STACK_WORDS", 2048) * 4 + 3072
@@ -95,9 +96,10 @@ def requirements(platform, defines, target):
             parts["mqtt_connections_buffers"] = 24576
         if "WITH_RS232_BRIDGE" in defines:
             # The UART bridge is allocated on enable, alongside WiFi/MQTT.
-            # RS232Bridge.cpp bounds its object to 4 KiB; reserve another
-            # 4 KiB for the SDK UART task, buffers and allocator overhead.
-            parts["uart_bridge_and_driver"] = 8192
+            # RS232Bridge.cpp bounds its object to 2304 bytes. Reserve 2560
+            # including allocation metadata, plus the unchanged 4 KiB for
+            # the SDK UART task, buffers and allocator overhead.
+            parts["uart_bridge_and_driver"] = 2560 + 4096
         if "ENABLE_OTA" in defines:
             # Existing own-image/manual-source allowance is independent of
             # the generic folder leaf/output buffers counted below.