Expand the TPM 2.0 hardware and firmware compatibility matrix

[darkbyte-JS]

Goal

Validate vault wrapping, explicit key generation, and provider ES256 key creation across TPM vendors.

Acceptance criteria

• Run the Release suite with -- --require-tpm.
• Report Windows build, TPM manufacturer/firmware, and sanitized pass/fail output.
• Test lock/unlock and profile deletion cleanup.
• Never attach private blobs, vault data, keyfiles, or recovery codes.
• Add confirmed hardware to docs/COMPATIBILITY.md.