OTA Firmware Update

- Firmware image management: version, target device model, rollback version - Campaign management: rollout to device group, percentage-based or all-at-once - Download protocol: HTTP/HTTPS with range support, chunk verification (checksum) - Update state machine: notified -> downloading -> verifying -> applying -> rebooting -> success/failed - Rollback: automatic revert to previous firmware on health check failure