Rebase release/25.11.1 over main

[romanz]

$ git range-diff origin/main release/25.11.1 HEAD
 1:  09830187dc <  -:  ---------- fix(core): reload settings after unlocking
 2:  cdf26b8ece <  -:  ---------- chore: update embedded binaries for T3W1
 3:  a077483c41 <  -:  ---------- chore: update definitions timestamp
 4:  0f7cec0760 <  -:  ---------- docs(core/prodtest): changelog for 0.3.5
 5:  847b500224 <  -:  ---------- docs(core/bootloader): changelog for 2.1.15
 6:  d1f13f7c21 <  -:  ---------- docs(core): changelog for 2.9.4
 7:  a491f75ab1 <  -:  ---------- chore: update releases.json
 8:  ccf73fd0e9 <  -:  ---------- chore(core): remove Bolt-specific strings
 9:  b13d458f15 <  -:  ---------- chore(core): sign translations
10:  c2cc32c29a <  -:  ---------- chore: bump versions
11:  3f0d05924b <  -:  ---------- fix(core): remove external tamper trigger
12:  99dbeaaced <  -:  ---------- fix(core): fix tamper RSOD not showing
13:  666497180b =  1:  a5cbe8c630 docs(core): changelog for 2.9.5
14:  0eafab2837 =  2:  bf551c2b12 chore: update releases.json
15:  aecac16bb1 =  3:  5d5519bf81 chore: update embedded secmon for T3W1
16:  7d0ae5012d =  4:  5317aede29 chore(core): update T3W1 dev secmon
17:  74faaff1c6 !  5:  bbcb0a7c11 chore(core): sign translations
    @@ Commit message
     
      ## core/translations/signatures.json ##
     @@
    -     "commit": "b13d458f151d50d5d87fa445fe95f72e1a6de7da"
    +     "commit": "4d80e657c5114d6914bfbd7502c5fe581fdb53e8"
        },
        "history": [
     +    {

[github-actions]

en main(all)

model	device_test	click_test	persistence_test
T2T1	test(all) main(all)	test(all) main(all)	test(all) main(all)
T3B1	test(all) main(all)	test(all) main(all)	test(all) main(all)
T3T1	test(all) main(all)	test(all) main(all)	test(all) main(all)
T3W1	test(all) main(all)	test(all) main(all)	test(all) main(all)

Latest CI run: 19774125130