Dev release exercise round 2: adds CONFIG_DM_CRYPT so encrypted bundles can install; first OTA-complete dev image.