MANUAL_ ECC_ SIGNING_ REQUIRED
Terminal state reached only on TEST devices: the TMS has no ECC CSR signing service, so the generated CSR must be signed out-of-band and the result installed via services.cabcard.toro.ToroClient.installEccTerminalCert. Setup pauses here; re-run services.cabcard.toro.ToroClient.ensureDeviceReady once the signed certificate is installed.