ZephCore

crypto: harden all crypto-sensitive memcmp + memset sites

crypto: switch login password compare to volatile-based ct_memeq

crypto: mitigate login plaintext-password vulnerability (server-side)

crypto: harden first-boot identity entropy + 3 RNG fixes

extract shutdown to it's own helper