Detect Broadcom ControlVault 3 fingerprint readers

[qybaihe]

Summary

• detect Dell ControlVault 3 readers by the exact Broadcom USB ID 0a5c:5843
• keep the no-kernel-driver guard used by vendor-based detection
• avoid broad allowlisting of unrelated Broadcom USB devices
• cover the matching ID, an unrelated Broadcom device, and a kernel-bound ControlVault device

Fixes #9507

Testing

• bash test/shell.d/hw-fingerprint-test.sh (14 assertions, ARM Linux VM)
• ./test/cli (ARM Linux VM)
• bash -n bin/omarchy-hw-fingerprint test/shell.d/hw-fingerprint-test.sh
• git diff --check