Keep vanetza-idf in obu-firmware, so a plain clone builds the firmware

obu-firmware builds against the vanetza-idf C-ITS library, which until now
came from the colleague's microbu-esp32c5 tree beside the repository and was
not tracked here, so a clone of this repository could not build the firmware
it ships. The library alone is now part of obu-firmware, as
obu-firmware/external/vanetza-idf: their external/vanetza-idf at commit
cf4b99f, unchanged (9775 files; see its PROVENANCE.md). CMake takes it from
there by default; -DVANETZA_IDF_DIR still points the build elsewhere.

The rest of the colleague's tree (their own VAM firmware, PKI tooling,
station-link Python tools, the V2X2MAP bridge) stays out of this repository
and gitignored; nothing is pushed to their repository. NOTES.md, docs/06,
TODO.md and the pcap verifier's usage line point at the new location.

obu-firmware/external/vanetza-idf/docs/idf/evidence/security-host-02/result.json

@@ -0,0 +1,58 @@
+{
+  "started_utc": "2026-09-13T12:25:50.161230+00:00",
+  "binary_sha256": "6b77e9371fff7aa171b3fd9efd93ca0f99e6215cca07dc7782426deda3d6b6a7",
+  "config_sha256": "040b5d7396da892504b951bb900637f6213d9b25fed437f02161a21ff13151d2",
+  "sut_sha256": "541939c608f9d5b025e69f606c2365e04bd11f33bcc7cd53c1b518061dc98c33",
+  "sut_args": "--security-pool ./certificates",
+  "pool_sha256": {
+    "CERT_IUT_A_AA.oer": "f446036a0efcb7ff83481af542010fcb2f2d09c5ddf9f879827c527e1d518974",
+    "CERT_IUT_A_AA.vkey": "56a3b7a28fca0cef8221d2327af5421680cdc3ffb98fc1781142f34e1b7e70e9",
+    "CERT_IUT_A_AT.oer": "42536b1b16e339917016676ea957d6ca7bfc5c6473095e9c6a96f4c09905cf42",
+    "CERT_IUT_A_AT.vkey": "758d50a2cbcfb131f26c8a5bd6de48ece27f23e87669df0ae012d6404d2c4637",
+    "CERT_IUT_A_RCA.oer": "8be6abca3560aa3e012fa439865908fa083c6616ef5f57d77d30684a1a658c03",
+    "CERT_IUT_A_RCA.vkey": "27665860cfcce2802d6666bb29a57ee6871b61d69944e0b2fd3aff70da7370e8",
+    "CERT_TS_A_AA.oer": "c5c3d989fc3ef31eae49050c22f2dee6d49ddc8eded4e0bd99b8baad5a396d5f",
+    "CERT_TS_A_AA.vkey": "1b2e04441de119372b7853052da34effc599e7203f7b2daede72bfe730a6eb7f",
+    "CERT_TS_A_AT.oer": "68441f201fe2db6d22abf2c60c9d6cf3762f628c70e43a7d8ab3a22f62b2407b",
+    "CERT_TS_A_AT.vkey": "c4c0142d32b28d2a75c26c6b1c41882a17d4cfd6c3f4905559d308a94c639d91",
+    "index.lst": "ecd305a0b80ace27b60a2bbf8ed6256d960c9b11f3421d8c58eb5964c6a6cb79"
+  },
+  "expected_cases_sha256": "f456349801d5f5115579f4ac9a50f3eeef6476095f71d8fd94b10129c1148fcf",
+  "verdicts": [
+    {
+      "testcase": "TC_SEC_ITSS_SND_CAM_01_BV",
+      "verdict": "pass"
+    },
+    {
+      "testcase": "TC_SEC_ITSS_SND_CAM_02_BV",
+      "verdict": "pass"
+    },
+    {
+      "testcase": "TC_SEC_ITSS_SND_CAM_03_BV",
+      "verdict": "pass"
+    },
+    {
+      "testcase": "TC_SEC_ITSS_SND_CAM_04_BV",
+      "verdict": "pass"
+    },
+    {
+      "testcase": "TC_SEC_ITSS_SND_DENM_01_BV",
+      "verdict": "pass"
+    },
+    {
+      "testcase": "TC_SEC_ITSS_SND_DENM_02_BV",
+      "verdict": "pass"
+    },
+    {
+      "testcase": "TC_SEC_ITSS_SND_DENM_03_BV",
+      "verdict": "pass"
+    }
+  ],
+  "status": "completed",
+  "exit_code": 0,
+  "missing_cases": [],
+  "unexpected_cases": [],
+  "duplicate_cases": [],
+  "campaign_complete": true,
+  "finished_utc": "2026-09-13T12:26:11.943658+00:00"
+}