Keep vanetza-idf in obu-firmware, so a plain clone builds the firmware

obu-firmware builds against the vanetza-idf C-ITS library, which until now
came from the colleague's microbu-esp32c5 tree beside the repository and was
not tracked here, so a clone of this repository could not build the firmware
it ships. The library alone is now part of obu-firmware, as
obu-firmware/external/vanetza-idf: their external/vanetza-idf at commit
cf4b99f, unchanged (9775 files; see its PROVENANCE.md). CMake takes it from
there by default; -DVANETZA_IDF_DIR still points the build elsewhere.

The rest of the colleague's tree (their own VAM firmware, PKI tooling,
station-link Python tools, the V2X2MAP bridge) stays out of this repository
and gitignored; nothing is pushed to their repository. NOTES.md, docs/06,
TODO.md and the pcap verifier's usage line point at the new location.

obu-firmware/external/vanetza-idf/tools/benchmark/cases/security/base.cpp

@@ -0,0 +1,49 @@
+#include "base.hpp"
+#include "vanetza/security/v2/sign_service.hpp"
+#include "vanetza/security/straight_verify_service.hpp"
+#include <boost/date_time/posix_time/posix_time.hpp>
+#include <iostream>
+
+using namespace vanetza;
+using namespace vanetza::security;
+
+SecurityBaseCase::SecurityBaseCase() :
+    runtime(Clock::at(boost::posix_time::microsec_clock::universal_time())),
+    crypto_backend(create_backend("default")),
+    certificate_cache(runtime),
+    certificate_provider(runtime),
+    certificate_validator(*crypto_backend, certificate_cache, trust_store),
+    sign_header_policy(runtime, positioning),
+    security_entity(create_sign_service(), create_verify_service())
+{
+    // nothing to do
+}
+
+void SecurityBaseCase::prepare()
+{
+    PositionFix position;
+    position.latitude = 49.014420 * units::degree;
+    position.longitude = 8.404417 * units::degree;
+    position.confidence.semi_major = 25.0 * units::si::meter;
+    position.confidence.semi_minor = 25.0 * units::si::meter;
+    assert(position.confidence);
+
+    positioning.position_fix(position);
+}
+
+std::unique_ptr<SignService> SecurityBaseCase::create_sign_service()
+{
+    return std::unique_ptr<SignService> {
+        new v2::StraightSignService(certificate_provider, *crypto_backend, sign_header_policy)
+    };
+}
+
+std::unique_ptr<VerifyService> SecurityBaseCase::create_verify_service()
+{
+    std::unique_ptr<StraightVerifyService> verify_service { new StraightVerifyService(runtime, *crypto_backend, positioning) };
+    verify_service->use_certificate_cache(&certificate_cache);
+    verify_service->use_certificate_provider(&certificate_provider);
+    verify_service->use_certificate_validator(&certificate_validator);
+    verify_service->use_sign_header_policy(&sign_header_policy);
+    return verify_service;
+}