reset to pre-modification baseline; restart feature work from clean state

Restoring the working tree to the pristine pre-Claude baseline previously
preserved at /data/clearpilot (now /data/clearpilot-baseline). The prior
modified-but-broken tree is snapshotted at /data/openpilot-broken-2026-05-03
and tagged here as pre-reset-2026-05-03 for reference.

From here, features (UI changes, dashcam, telemetry, GPS, display modes,
speed logic, standstill power saving, etc.) will be re-introduced one at
a time with proper testing.

selfdrive/thermald/power_monitoring.py

@@ -36,9 +36,12 @@ class PowerMonitoring:
     # Reset capacity if it's low
     self.car_battery_capacity_uWh = max((CAR_BATTERY_CAPACITY_uWh / 10), int(car_battery_capacity_uWh))
 
-    # CLEARPILOT: hardcoded 30 minute shutdown timer (not user-configurable)
-    self.device_shutdown_time = 1800
-    self.low_voltage_shutdown = VBATT_PAUSE_CHARGING
+    # FrogPilot variables
+    device_management = self.params.get_bool("DeviceManagement")
+    device_shutdown_setting = self.params.get_int("DeviceShutdown") if device_management else 33
+    # If the toggle is set for < 1 hour, configure by 15 minute increments
+    self.device_shutdown_time = (device_shutdown_setting - 3) * 3600 if device_shutdown_setting >= 4 else device_shutdown_setting * (60 * 15)
+    self.low_voltage_shutdown = self.params.get_float("LowVoltageShutdown") if device_management else VBATT_PAUSE_CHARGING
 
   # Calculation tick
   def calculate(self, voltage: int | None, ignition: bool):
@@ -122,13 +125,7 @@ class PowerMonitoring:
                             offroad_time > VOLTAGE_SHUTDOWN_MIN_OFFROAD_TIME_S)
     should_shutdown |= offroad_time > self.device_shutdown_time
     should_shutdown |= low_voltage_shutdown
-    # CLEARPILOT: removed `car_battery_capacity_uWh <= 0` trigger. That's a virtual
-    # capacity counter floor-limited to 3e6 µWh on boot which drains in ~12 min at
-    # typical device power. With a short drive that doesn't fully recharge (charges
-    # at 45W, cap 30e6 µWh = 36 min to full), a quick store stop could trip shutdown
-    # well before the intended 30-min idle timer. The real protection we want here
-    # is the car battery voltage check (kept above) — the virtual counter is now
-    # retained only for telemetry.
+    should_shutdown |= (self.car_battery_capacity_uWh <= 0)
     should_shutdown &= not ignition
     should_shutdown &= (not self.params.get_bool("DisablePowerDown"))
     should_shutdown &= in_car