fix(rynk): report locked bootloader jumps

[HaoboGu]

What

Check the device lock state before sending the fire-and-forget bootloader jump, and return Rejected(Locked) when the device is locked.

Why

Locked devices reject bootloader jumps in firmware, but the host API previously returned Ok(()) because it deliberately did not wait for a reply. Default locked configurations therefore reported success without entering the bootloader.

Root cause

A fire-and-forget command cannot distinguish a successful reset from a lock-gate rejection.

Impact

Unlocked jumps gain one lock-status request. The actual jump remains fire-and-forget because a successful device resets before replying.

Checks

• cargo test bootloader_jump
• cargo test lock_gate_rejects_and_reports
• wasm-pack build --target web --dev

Built on #848.