STEP_050M07P27FW11_R06_TEMP_URL_BACKEND temporary config download URL backend: session/profile-bound 120s HMAC token; old config and QR preserved; accepted after postcheck