Restore truncated mesh.proto content and keep intended lockdown schema changes

meshtastic/admin.proto

@@ -619,6 +619,31 @@ message LockdownAuth {
    * from the on-flash, HMAC-bound counter.
    */
   uint32 max_session_seconds = 5;
+
+  /*
+   * Disable lockdown mode. Requires a valid passphrase in the same
+   * message (the device must prove the operator owns it before
+   * reverting at-rest encryption). On success the firmware decrypts
+   * every stored config / channel / nodedb file back to plaintext,
+   * removes the wrapped DEK, unlock token, monotonic-counter, and
+   * backoff files, and reboots out of lockdown.
+   *
+   * This is the inverse of the provision/unlock path: it is how the
+   * client app's "lockdown mode" toggle returns a device to normal
+   * operation.
+   *
+   * NOT reversed by this operation: APPROTECT. Once the debug port
+   * lockout has been burned (on silicon where it is effective) it is
+   * permanent — disabling lockdown decrypts your data and removes the
+   * access gates, but the SWD/JTAG port stays locked for the life of
+   * the device (recoverable only via a full chip erase over a debug
+   * probe, which destroys all data). Clients should make this
+   * irreversibility clear at the moment lockdown is first enabled.
+   *
+   * When true the passphrase field is still required; boots_remaining,
+   * valid_until_epoch, max_session_seconds, and lock_now are ignored.
+   */
+  bool disable = 6;
 }
 
 /*

meshtastic/mesh.proto

@@ -671,7 +671,7 @@ enum HardwareModel {
   MESH_TAB = 86;
 
   /*
-   * MeshLink board developed by LoraItalia. NRF52840, eByte E22900M22S (Will also come with other frequencies), 25w MPPT solar charger (5v,12v,18v selectable), support for gps, buzzer, oled or e-ink display, 10 gpios, hardware watchdog
+   * MeshLink board developed by LoraItalia. NRF52840, eByte E22900M22S (Will also come with other frequencies), 25w MPPT solar charger (5v,12v,18v selectable), support for gps, buzzer, oled or eInk, and an external programming and serial port.
    * https://www.loraitalia.it
    */
   MESHLINK = 87;
@@ -899,8 +899,8 @@ enum HardwareModel {
   HELTEC_MESH_NODE_T1 = 133;
 
   /*
-     * B&Q Consulting Station G3: TBD
-  */
+   * B&Q Consulting Station G3: TBD
+   */
   STATION_G3 = 134;
 
   /*
@@ -2348,6 +2348,16 @@ message LockdownStatus {
      * Passphrase rejected. backoff_seconds is non-zero when rate-limited.
      */
     UNLOCK_FAILED = 4;
+
+    /*
+     * Lockdown is supported by this firmware but not currently active
+     * (no passphrase has been provisioned, or it was disabled via
+     * AdminMessage.lockdown_auth.disable). The device is operating in
+     * normal, non-encrypted mode. Clients render the lockdown-mode
+     * toggle as OFF on receiving this. Distinct from NEEDS_PROVISION,
+     * which is only used during an in-progress enable flow.
+     */
+    DISABLED = 5;
   }
 
   /* Current lockdown state being reported. */