fix: preserve EPG data and correct tuner selection

[Khronos31]

Summary

• Fix EPGStation payload updates so recordings, SQLite data, and persistent log settings survive upgrades; avoid stopping Node on ordinary service starts and use an explicit restart action for settings that require it.
• Fix first-install log sample lookup and add regression coverage for migration, payload swaps, and service start policy.
• Fix PX4 model selection and Q3U4 receiver retry behavior, and redact raw CCID response logs while retaining bounded diagnostics.
• Pin Siano and PX4 userland to v0.1.9 at their exact commits. Bump mirakc to 0.3.3 and EPGStation to 0.3.1; align release checks and signed-candidate generation for both APKs.

config.yml continues to be generated from the upstream template at service start. The persistence change covers recording/database data and existing log configuration.

Verification

• EPGStation testDebugUnitTest: 6 tests, 0 failures/errors/skips.
• EPGStation unsigned release assembly and version metadata: 0.3.1 (301).
• PX4 Android adapter task for arm64-v8a and armeabi-v7a, including ELF verifier.
• CCID redaction/bounded diagnostics, PX4 tune plan/receiver/card retry, device-evidence, and release-attestation host tests.
• actionlint, yamllint, ShellCheck, git diff --check, and release version checks.

No device installation, USB access, HA service operation, tag, or release was performed. The signed-candidate workflow is intended to produce public Actions artifacts retained for three days after dispatch.