Caliptra Core ROM

• CVE-2026-11835 Medium 5.6 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU) 0.1%
• CVE-2026-11836 Low 1.8 Production Debug-Unlock Token Verification Missing Device Binding 0.1%