feat: Implement EZSP v13 SecurityManager API

[abidkhan148]

Summary

EZSP v13 (EmberZNet 7.4 / Gecko SDK 4.4) removed 12 legacy security commands and replaced them with a new SecurityManager API. PR #1413 bumped EZSP_MAX_VERSION to 13 but did not implement the replacement commands, causing all key management operations to silently fail on EZSP v13 firmware.

Observed symptoms on EZSP v13:

• getZigBeeNetworkKey() returns null (network key invisible)
• getZigBeeLinkKey() returns null (link key invisible)
• Device joining unreliable (addTransientLinkKey fails silently)

Changes

New data structures (4 files)

• EzspSecurityManagerKeyType — enum for SecurityManager key types
• EzspSecurityManagerContext — context struct for SecurityManager operations
• EzspSecurityManagerNetworkKeyInfo — network key info struct
• EzspSecurityManagerApsKeyMetadata — APS key metadata struct

New EZSP command classes (22 files — 11 Request/Response pairs)

Command	Frame ID	Replaces
exportKey	0x0114	getKey (0x6A)
importKey	0x0115	setKeyTableEntry (0x72)
secManImportTransientKey	0x0111	addTransientLinkKey (0xAF)
secManExportTransientKeyByEui	0x0113	getTransientLinkKey (0xCE)
secManExportTransientKeyByIndex	0x0112	getTransientKeyTableEntry (0x6D)
secManExportLinkKeyByEui	0x010D	getKeyTableEntry by EUI (0x71)
secManExportLinkKeyByIndex	0x010F	getKeyTableEntry by index (0x71)
secManImportLinkKey	0x010E	addOrUpdateKeyTableEntry (0x66)
secManCheckKeyContext	0x0110	(new)
secManGetNetworkKeyInfo	0x0116	(new)
secManGetApsKeyInfo	0x010C	(new)

Version-conditional routing (2 file edits)

• EmberNcp.getKey() — detects EZSP v13+ and routes to exportKey
• EmberNcp.addTransientLinkKey() — detects v13+ and routes to secManImportTransientKey
• EzspFrame.java — registered all 11 new frame IDs and handler map entries

Backwards compatible

EZSP v4-v12 code paths are completely unchanged. The version check uses EzspFrame.getEzspVersion() >= 13.

References

• Silicon Labs EZSP Reference Guide v8.2.2, Section 09 - Security Frames
• bellows (zigpy) EZSP v13 implementation for reference patterns
• Issue EZSP v13 (EmberZNet Serial Protocol versions 13) for Silicon Labs Ember NCP dongles? #1411 — warned about dropped key reading support
• PR feat: Bump EZSP to V13 #1413 — version bump only

Test plan

• Compiles successfully (mvn compile — 422 source files, 0 errors)
• Verify with EZSP v8 firmware (EmberZNet 6.10.3) — legacy paths unchanged
• Verify with EZSP v13 firmware (EmberZNet 7.4.x) — network key, link key, and device joining work

cc @cdjackson

[CLAassistant]

All committers have signed the CLA.

[cdjackson]

Thanks Abid.

One thing to note - I plan to deprecate this EZSP driver after EZSP13. I think I've already pushed the branch with the new driver (called Silabs) - I'll port over this change when I get a chance (maybe next week).

The reason for the change is that Silabs made some significant changes to the protocol - small change, but hard to maintain compatibility... In general everything remains the same, but upgraded for v14, and I'm hoping also to add a few enhancements that were difficult to back port into the exisiting driver...