Fix Wi-Fi credential save with plain NVS (encryption off).

Initialise NVS before integration startup, recover from encrypted-partition mismatches without re-enabling encryption, and improve provisioning logs and POST body handling.

Co-authored-by: Cursor <cursoragent@cursor.com>

Software/main/main.cpp

@@ -15,6 +15,7 @@
 #include "bluetooth/BluetoothService.hpp"
 #include "integration/IntegrationService.hpp"
 #include "net/NetBootstrap.hpp"
+#include "secure_store/NvsPlatformInit.hpp"
 #include "ota/OtaService.hpp"
 #include "secure_store/NvsSecureStore.hpp"
 #include "si4684/Si4684Tuner.hpp"
@@ -69,6 +70,11 @@ extern "C" void app_main()
     return;
 #endif
 
+    if (auto nvsResult = secure_store::initEncryptedStorage(); !nvsResult) {
+        ESP_LOGE(kTag, "NVS init failed — halting");
+        return;
+    }
+
     static secure_store::NvsSecureStore store;
 
     static tuner::TunerService tunerService(