sdkconfig.defaults was gitignored and missing — fresh clones failed to link due to undefined references to mbedtls_hkdf and mbedtls_chachapoly_*. - Remove sdkconfig.defaults from .gitignore - Add sdkconfig.defaults with required mbedTLS options