Recovery is no longer embedded in boot.img -- that forced recovery.img into
the vendor image size check and overflowed the padded 2GB vendor partition.
Instead:
- common.mk gates recovery with PRODUCT_BUILD_RECOVERY_IMAGE (default false),
so the normal build never touches it. Build it on demand with the new
`precovery` helper (PAWLET_BUILD_RECOVERY=1 m recoveryimage) and flash the
result to the recovery partition.
- pawlet-recoveryboot.sh enters recovery via reboot,3 (separate partition)
again, and gains a boot-loop failsafe: a /metadata counter (cleared on
boot_completed via the .rc) drops the device into recovery after BOOT_MAX
consecutive boots that reach early init but never complete.
- BootControl comments restored to A/B-via-tryboot (a failed trial reverts to
the active slot; recovery is a separate partition via reboot,3).
oxmc
8f33626a21