C2000G2 firmware 1.2.1.6 / 1.9.3.3 changes authentication flow

[kb1ibt]

The module firmware v0.3.3.0 added the following strings:
enforce: reject non-ECDH mode / reject non-GCM connect
This means that the cleartext 0001 results in the link being dropped. So it needs the "Prime" style, which is exactly what I warned about in this PR comment:

capability declares what the device supports, readable before a single frame is sent — and 04 means the fully encrypted 4xxx negotiation is available on that unit. This is the one I'd flag hardest: the C2000 G2 advertises 04, and SolixBLE currently negotiates it in plaintext 0xxx.

[kb1ibt]

@claude locally decompiled part of the v0.3.3.0 firmware and explained:

I've traced the mechanism: protocol_data_parse checks bit 0x40 on REQ_CONNECT via a runtime policy hook (0x3fc8bda4) that decides accept/reject and doubles as the expected auth mode, with handler_set_capabilities using the same hook.