Fix storage recovery and deferred runtime state

Recover usable ESP32 preferences and channels before permitting replacement; keep identity and ACL persistence transactional and complete.

Preserve MQTT commit boundaries, restore OTA identity and policy after deferred allocation, retain radio gain retries, and reject invalid flood limits. Add production-path fault regressions and CI coverage.

.github/workflows/run-unit-tests.yml

@@ -88,8 +88,12 @@ jobs:
           python3 -B test/test_companion_response_bounds.py -v
           python3 -B test/test_companion_uncached_storage.py -v
           python3 -B test/test_companion_ota_config.py -v
+          python3 -B test/test_ota_identity_policy.py -v
+          python3 -B test/test_companion_radio_gain_restore.py -v
           python3 -B test/test_common_radio_persistence.py -v
           python3 -B test/test_common_prefs_commit.py -v
+          python3 -B test/test_mqtt_prefs_commit.py -v
+          python3 -B test/test_identity_and_settings_recovery.py -v
           python3 -B test/test_contact_cache.py -v
 
       - name: Verify receive recovery and pinned radio status transport