v1.3.0: Add 14 keyfob protocols (8 ProtoPirate + 6 Flipper-ARF), fix KeeLoq overflow

Brings KAT to 32 protocol decoders. Ported from the ProtoPirate reference and the
D4C1-Labs/Flipper-ARF firmware:

  ProtoPirate (8): Kia V7, Ford V1, Ford V2, Ford V3, Chrysler V0, Honda Static,
  Honda V1, Land Rover V0.
  Flipper-ARF (6): Toyota, Land Rover RKE, Mazda Siemens, BMW CAS4,
  Porsche Cayenne, PSA2.

Each decoder is gated (CRC / checksum / fixed markers / frame structure) so it
cannot false-match existing protocols; every previously-decoding IMPORTS capture
decodes unchanged. Real-capture decodes added for Ford V3 (LDV T80), Honda Static
(Honda), Toyota (Camry NRZ variant), and PSA2 (Groupe PSA, serial 0x99EB25); the
rest are validated by encode/decode round-trip and synthetic-frame tests.

Also fixes a debug-only underflow panic in keeloq_common::keeloq_decrypt
(15 - r underflowed; now wrapping_sub to match the reference's unsigned wrap;
release behavior unchanged).

Adds per-protocol docs, updates the README protocol table, capture metadata
(encoding / RF / encryption), make-suggestion mapping, and CHANGELOG.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JEfaKqzB3T4qsrybwfEi73

docs/ford_v2.md

@@ -0,0 +1,62 @@
+---
+layout: default
+---
+
+# Ford V2 Protocol
+
+**Rust module:** `src/protocols/ford_v2.rs`
+**Reference:** `REFERENCES/ProtoPirate/protocols/ford_v2.c`
+
+## Overview
+
+Ford V2 uses Manchester encoding at 200/400 µs. 104 bits total (13 bytes). The frame begins with a
+16-bit Manchester sync that equals `0x7FA7` (the decoder matches the *inverted* shift register against
+`!0x7FA7`); those two sync bytes `0x7F 0xA7` head the 13-byte buffer. Decoded data bits are inverted
+before packing (`data_bit = !bit`). There is no CRC — structure is validated by the two sync bytes plus
+a known button code, so Ford V2 will not false-match.
+
+The Manchester decoder uses Flipper's transition table (same table as Ford V0), with Ford V2 polarity
+`level ? High : Low`.
+
+## Timing
+
+| Parameter | Value  | Notes                       |
+|-----------|--------|-----------------------------|
+| Short     | 200 µs | ±260 µs (te_delta)          |
+| Long      | 400 µs | ±260 µs                     |
+| Min bits  | 104    | 13 bytes                    |
+| Preamble  | ≥64 short pulses | before the sync   |
+
+## Frame Layout (104 bits / 13 bytes)
+
+- **bytes 0–1:** sync `0x7F 0xA7`
+- **bytes 2–5:** serial (32-bit, big-endian)
+- **byte 6:** button — valid codes `0x10` (Lock), `0x11` (Unlock), `0x13` (Trunk), `0x14` (Panic), `0x15`
+- **bytes 7–8 + byte 9 MSB:** counter = `((b7 & 0x7F) << 9) | (b8 << 1) | (b9 >> 7)`; byte 7 MSB carries a button parity bit (refreshed by the encoder)
+- **bytes 9–12:** rolling/hop tail (stashed in `extra` so the encoder can rebuild the full frame)
+
+The exported `data` (Key) word is the top 8 bytes; bytes 8–12 (40 bits) are carried in `extra`.
+
+## RF
+
+- **Encoding:** Manchester (Ford V2 polarity `level ? High : Low`; decoded bits inverted)
+- **RF modulation:** FM (per ProtoPirate `SubGhzProtocolFlag_FM`)
+- **Encryption:** none — validated by sync bytes + valid button code
+- **Frequencies:** 315 MHz, 433.92 MHz
+
+## Decoder Steps
+
+1. **Reset** → a short pulse (~200 µs) begins the preamble.
+2. **Preamble** — count short pulses; after ≥64 shorts a long LOW pulse enters Sync.
+3. **Sync** — Manchester-decode bits into a 16-bit shift register; when it matches `!0x7FA7`, prime the two sync bytes and enter Data.
+4. **Data** — Manchester events feed the state machine; decoded bits are inverted and packed MSB-first into 13 bytes. At 104 bits the sync bytes and button are validated and the frame committed. A non-short/long pulse (gap) ends the attempt.
+
+## Encoder
+
+Supported (matches `subghz_protocol_encoder_ford_v2`). Rebuilds the 13-byte frame, applies the requested
+button, refreshes byte-7 parity, then emits 6 bursts of a 70-pair preamble + sync + 104 Manchester bits
+(encoder short 240 µs), separated by ~16 ms inter-burst gaps.
+
+## Validation
+
+Verified by an encode→decode round-trip / synthetic-frame check (no local capture available).