ce26b9c100
Helpers source profiles.d/<name>.sh and assert SERVER_URL, API_KEY, and ALLOWED_SERIALS. verify_serial_allowed dies with an explicit cross-watch warning when the attached serial is not in the profile's allow-list. Not yet wired into apply_target — that follows in the next commit. refs #3