Add cache-ABL safety and docs consolidation

[1vivy]

Summary

• Consolidate project planning/RE notes under docs/project and remove stale planning sprawl.
• Add cache-ABL build/runtime support with fail-closed recursion checks for LinuxLoader's UTF-16 efisp loader label.
• Drop mode-3 user-facing reporting and document modes 0/1 plus planned mode-2 profile work.
• Remove recovery ZIP/profile ZIP delivery from this PR and add docs/project/on-device-insertion-research-brief.md for a separate, testable on-device insertion PR.

Confidence / safety notes

• Confidence: medium-high for host-built static cache-ABL build/runtime support and recursion safety gate.
• This PR no longer ships ZIP/recovery installation workflows or on-device insertion logic.
• On-device cached ABL/profile insertion remains deferred until the insertion artifact can be validated before any persistent non-HLOS write.
• Remaining future hardening: hook rollback on unexpected StartImage return or partial hook install failure.

Validation

• python3 -m py_compile scripts/generate-cached-abl-header.py
• bash tests/053_cache_abl_lint.sh
• bash tests/runall.sh
• scripts/build.sh --mode 1 --cache-abl tests/images/op15-infiniti-201-abl.img
• Ghidra RE review of LinuxLoader_infiniti.efi EFISP GBL load path; annotations saved in the Ghidra project and findings documented in docs/project/re-findings.md.

Note: one cache-ABL build attempt was run concurrently with tests/runall.sh and failed due to both jobs racing in the shared Build/ tree; rerunning the cache-ABL build serially passed.

Related PRs

• edk2 submodule PR: fastboot: drop mode-3 reporting edk2-gbl-chainload#8

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.