provision: simplify boot with quick_boot flag, auto-update from git

- on_start.sh: always enables WiFi, waits 30s for connectivity if
  no /data/quick_boot, then runs provision.sh
- New provision.sh: sets up SSH keys, installs openvpn, pulls latest
  code from remote (hard reset, remote wins), runs build_only.sh,
  touches /data/quick_boot on success
- Delete old dev/on_start.sh, dev/provision.sh, dev/on_start_brian.sh.cpt
  (encrypted key decryption no longer needed)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

system/clearpilot/on_start.sh

@@ -3,5 +3,24 @@
 # Install logo
 bash /data/openpilot/system/clearpilot/startup_logo/set_logo.sh
 
-# Reverse ssh disabled — using VPN for remote access instead
-# bash /data/openpilot/system/clearpilot/dev/on_start.sh
+# Always ensure WiFi radio is on
+nmcli radio wifi on 2>/dev/null
+
+if [ ! -f /data/quick_boot ]; then
+    # No quick_boot flag — wait for internet connectivity (up to 30s)
+    echo "Waiting for internet connectivity (up to 30s)..."
+    for i in $(seq 1 30); do
+        if nmcli networking connectivity check 2>/dev/null | grep -q "full"; then
+            echo "Internet connectivity detected after ${i}s"
+            break
+        fi
+        sleep 1
+    done
+
+    # If online, run provision
+    if nmcli networking connectivity check 2>/dev/null | grep -q "full"; then
+        bash /data/openpilot/system/clearpilot/provision.sh
+    else
+        echo "No internet connectivity after 30s, skipping provision"
+    fi
+fi