[3rdIteration]

Summary

Adds a jCardsim-based test suite that exercises the Satochip, Satodime and Seedkeeper applets in both the official and THD-89 builds, plus the cross-applet Seedkeeper -> Satochip secure import. 318 tests, all passing.

Also fixes the two open issues:

• sha256sums.txt in the build artifact never verifies #2 sha256sums.txt never verifies (CI manifest listed itself and used ./build/... paths).
• THD-89 Satochip cannot import a Seedkeeper pubkey #3 THD-89 Satochip cannot import a Seedkeeper pubkey (trusted_pubkey never allocated). The one-line fix is in the applets/satochip-thd89 submodule: Fix THD-89 trusted_pubkey allocation (Seedkeeper secure import) SatochipApplet#3.

What's included

tests/ is a Gradle multi-project (wrapper included, JDK 8):

• testkit/common - jCardsim Card wrapper, a full secure-channel client (ECDH handshake, ephemeral-pubkey recovery from the self-signature, 0x82 wrap/unwrap), crypto/secp256k1 helpers, RFC known-answer tests.
• testkit/tests-* - per-applet suites shared by both forks:
  • secure channel: handshake, wrapped round-trips, wrong MAC / IV / length, uninitialized.
  • Satochip: status, setup, PIN, label, BIP32 seed import/reset, authentikey, extended key, message signing, 2FA, trusted-pubkey + encrypted-secret import, PKI, challenge-response.
  • Satodime: status, setup, keyslot seal/unseal/privkey/reset/transfer, metadata, contactless unlock counter + HMAC unlock code, PKI.
  • Seedkeeper: status, setup, PIN, label, NFC policy, masterseed generation, plaintext import/export, listing, reset, storage layer (ObjectManager/MemoryManager/Logger) unit tests, authentikey, PKI.
• applet-<name>[-thd89] - one module per variant compiling the real applet sources; integration-pairing[-thd89] - Satochip + Seedkeeper on one simulated card.

CI

.github/workflows/ant.yml now has a test job (recursive checkout, JDK 8, ./gradlew test, report upload) in addition to the existing Ant build job, which now generates and verifies the checksum manifest (issue #2).

Notes

• The THD-89 regression tests assert the fixed behaviour, so they depend on the submodule PR Fix THD-89 trusted_pubkey allocation (Seedkeeper secure import) SatochipApplet#3. This branch's submodule pointer already references that commit (8693b23); merge the submodule PR without squashing (or update the pointer after merge) so the SHA stays reachable.
• jCardsim implements every primitive the applets need, so it cannot reproduce hardware-only failures (missing ALG_EC_SVDP_DH_PLAIN_XY, CAP memory-fit, side channels). CAP files are still built and checksum-verified by the Ant job.
• The applet change itself (issue THD-89 Satochip cannot import a Seedkeeper pubkey #3) should be verified on a real THD-89 card before merging the submodule PR.