docs(README): 合并WiFi OTA和BLE OTA

- 调整ESP32_COMM/finalize函数执行顺序：先进行SHA-256校验比对，
  再调用esp_ota_end和设置启动分区
- 更新BLE传输收尾描述，明确设备端读回OTA分区进行SHA比对的流程，
  以及FINISH事件的上报机制

main/transport/protocol.cpp

@@ -40,6 +40,15 @@ void Protocol::init()
     DEBUG_INFO("PROT", "=== 初始化协议层 ===");
     DEBUG_INFO("PROT", "协议层功能: nonce 扰码 + 会话密钥管理");
 
+    esp_fill_random(m_scrambleConst, SCRAMBLE_CONST_LEN);
+
+    {
+        char hex[SCRAMBLE_CONST_LEN * 2 + 1] = {0};
+        for (size_t i = 0; i < SCRAMBLE_CONST_LEN; ++i)
+            snprintf(&hex[i * 2], sizeof(hex) - i * 2, "%02X", m_scrambleConst[i]);
+        DEBUG_INFO("PROT", "SCRAMBLE_CONST (RNG): %s", hex);
+    }
+
     m_initialized = true;
     DEBUG_INFO("PROT", "协议层就绪");
 }
@@ -55,11 +64,11 @@ void Protocol::scrambleGenerate(uint32_t timestamp, uint32_t mem_addr,
     memcpy(&state[0], &timestamp, 4);
     memcpy(&state[4], &mem_addr, 4);
     memcpy(&state[8], &rand_seed, 4);
-    memcpy(&state[12], SCRAMBLE_CONST, 4);
+    memcpy(&state[12], m_scrambleConst, 4);
 
     for (int round = 0; round < 3; round++) {
         for (int i = 0; i < 16; i++) {
-            state[i] ^= SCRAMBLE_CONST[i];
+            state[i] ^= m_scrambleConst[i];
             state[i] = (state[i] << 1) | (state[i] >> 7);
         }
     }
@@ -67,7 +76,7 @@ void Protocol::scrambleGenerate(uint32_t timestamp, uint32_t mem_addr,
     for (int round = 0; round < 2; round++) {
         uint32_t *words = (uint32_t *)state;
         for (int i = 0; i < 4; i++) {
-            words[i] ^= SCRAMBLE_CONST[i * 4 % 16] | ((uint32_t)SCRAMBLE_CONST[i * 4 + 1] << 8);
+            words[i] ^= m_scrambleConst[i * 4 % 16] | ((uint32_t)m_scrambleConst[i * 4 + 1] << 8);
         }
     }
 
@@ -99,4 +108,4 @@ void Protocol::sessionKeyClear(session_ctx_t *sess)
         memset(sess->iv, 0, 16);
         sess->used = 0;
     }
-}
+}

main/transport/protocol.h

@@ -19,7 +19,6 @@
 
 // 安全常量（定义在 app_config.h 中）
 inline constexpr size_t MASTER_KEY_HERE_LEN = 16;
-inline constexpr size_t SCRAMBLE_CONST_HERE_LEN = 16;
 inline constexpr size_t CHIP_UID_LEN = 12;
 
 // AES 会话上下文
@@ -55,7 +54,7 @@ public:
      * @param rand_seed 随机种子。
      * @param nonce_out 输出的 16 字节 nonce 缓冲区。
      */
-    static void scrambleGenerate(uint32_t timestamp, uint32_t mem_addr,
+    void scrambleGenerate(uint32_t timestamp, uint32_t mem_addr,
                                  uint32_t rand_seed, uint8_t *nonce_out);
     /**
       * @brief 会话密钥初始化，将密钥拷贝到会话上下文。
@@ -76,6 +75,7 @@ private:
     Protocol(const Protocol&) = delete;
     Protocol& operator=(const Protocol&) = delete;
 
+    uint8_t m_scrambleConst[SCRAMBLE_CONST_LEN] = {0};
     bool m_initialized = false;
 };