improv: Add missing NetworkManager connection settings for headless systems

Add required connection settings to all improv onboarding scripts to ensure
WiFi connections work reliably on headless embedded systems:

- connection.autoconnect-retries: '-1' (unlimited retries)
- connection.auth-retries: '-1' (unlimited authentication retries)
- connection.permissions: '' (system-wide use)

These settings work together with psk-flags=0 to prevent 'no secrets' errors
when 4-way handshake fails. Without unlimited retries, connections may fail
permanently after transient network issues.

Also updated imx93-jaguar-eink script to use auth-retries=-1 instead of 3
for consistency and maximum reliability.

See: meta-dynamicdevices-distro/recipes-connectivity/networkmanager/networkmanager/README_PATCH_REQUIREMENTS.md

Author: Alex J Lennon

recipes-devtools/python/python3-improv/imx93-jaguar-eink/onboarding-server-eink.py

@@ -137,8 +137,9 @@ def wifi_connect(ssid: str, passwd: str) -> Optional[list[str]]:
       # Create WiFi connection with improved settings for boot-time reliability:
       # - autoconnect-priority 20 (highest priority - ensures wifi-connect.service selects this connection)
       #   Higher than GrosnyIoT (10) so Improv-configured networks are preferred
-      # - auth-retries 3 (retry authentication 3 times)
       # - dhcp-timeout 60 (60 seconds for DHCP, longer than default 45)
+      # - autoconnect-retries -1 (retry connection indefinitely - never give up)
+      # - auth-retries -1 (retry authentication indefinitely - never give up)
       # ⚠️  CRITICAL: wifi-sec.psk-flags:'0' is REQUIRED for the NetworkManager patch
       # (0001-wifi-dont-clear-secrets-if-stored-in-keyfile.patch) to work correctly.
       # Without this, the patch will not activate and connections may fail permanently
@@ -151,7 +152,9 @@ def wifi_connect(ssid: str, passwd: str) -> Optional[list[str]]:
           'wifi-sec.psk-flags': '0',  # REQUIRED: Store PSK in file, not agent-only (patch requirement)
           'connection.autoconnect': 'yes',
           'connection.autoconnect-priority': '20',
-          'connection.auth-retries': '3',
+          'connection.autoconnect-retries': '-1',  # Retry connection indefinitely (-1 = unlimited)
+          'connection.auth-retries': '-1',  # Retry authentication indefinitely (-1 = unlimited)
+          'connection.permissions': '',  # Allow system-wide use
           'ipv4.dhcp-timeout': '60'
       }, f"{INTERFACE}", f"{CON_NAME}", True)
 

recipes-devtools/python/python3-improv/onboarding-server.py

@@ -94,6 +94,9 @@ def wifi_connect(ssid: str, passwd: str) -> Optional[list[str]]:
       print(f'No connection {CON_NAME} to remove')
 
     try:
+      # Create connection with secrets stored in file (not agent-only)
+      # This prevents "no secrets" errors on headless systems when 4-way handshake fails
+      #
       # ⚠️  CRITICAL: wifi-sec.psk-flags:'0' is REQUIRED for the NetworkManager patch
       # (0001-wifi-dont-clear-secrets-if-stored-in-keyfile.patch) to work correctly.
       # Without this, the patch will not activate and connections may fail permanently
@@ -103,7 +106,11 @@ def wifi_connect(ssid: str, passwd: str) -> Optional[list[str]]:
           'ssid':ssid.decode('utf-8'), 
           'wifi-sec.key-mgmt':'wpa-psk', 
           'wifi-sec.psk':passwd.decode('utf-8'),
-          'wifi-sec.psk-flags':'0'  # REQUIRED: Store PSK in file, not agent-only (patch requirement)
+          'wifi-sec.psk-flags':'0',  # REQUIRED: Store PSK in file, not agent-only (patch requirement)
+          'connection.autoconnect':'yes',
+          'connection.autoconnect-retries':'-1',  # Retry connection indefinitely (-1 = unlimited)
+          'connection.auth-retries':'-1',  # Retry authentication indefinitely (-1 = unlimited)
+          'connection.permissions':''  # Allow system-wide use
       }, f"{INTERFACE}", f"{CON_NAME}", True)
 
       # Save connection to keyfile to ensure secrets are persisted (REQUIRED)