ci: drop wolfHSM from per-PR TZ tests; covered by nightly in wolfHSM

Author: aidangarske

.github/workflows/trustzone-emulator-tests.yml

@@ -119,43 +119,11 @@ jobs:
           grep -q "\\[BKPT\\] imm=0x7f" /tmp/m33mu-fwtpm.log
           grep -q "\\[EXPECT BKPT\\] Success" /tmp/m33mu-fwtpm.log
 
-      - name: Clean and build test with wolfHSM (stm32h5)
-        run: |
-          make clean distclean
-          cd port/stmicro/stm32h5-tz-wolfhsm
-          make
-          test -f out/wolfboot.bin
-          test -f out/image_v1_signed.bin
-          test -f out/manifest.env
-
-      - name: Prepare wolfHSM persistence directory
-        run: |
-          rm -rf /tmp/m33mu-wolfhsm-persist
-          mkdir -p /tmp/m33mu-wolfhsm-persist
-
-      - name: Run wolfHSM whTest_ClientConfig (stm32h5)
-        run: |
-          cd /tmp/m33mu-wolfhsm-persist
-          m33mu "$GITHUB_WORKSPACE/wolfboot.bin" \
-            "$GITHUB_WORKSPACE/test-app/image_v1_signed.bin:0x60000" \
-            --persist --uart-stdout --timeout 600 --expect-bkpt 0x7d \
-            --quit-on-faults \
-            | tee /tmp/m33mu-wolfhsm.log
-
-      - name: Verify wolfHSM whTest_ClientConfig (stm32h5)
-        run: |
-          # Final success marker - the test itself reports PASSED.
-          grep -q "wolfHSM whTest_ClientConfig PASSED" /tmp/m33mu-wolfhsm.log
-          # Spot-check that the major test phases each landed.
-          grep -q "RNG DEVID=0x5748534D SUCCESS"       /tmp/m33mu-wolfhsm.log
-          grep -q "AES GCM DEVID=0x5748534D SUCCESS"   /tmp/m33mu-wolfhsm.log
-          grep -q "RSA SUCCESS"                        /tmp/m33mu-wolfhsm.log
-          grep -q "ECC ephemeral ECDH SUCCESS"         /tmp/m33mu-wolfhsm.log
-          grep -q "SHA256 DEVID=0x5748534D SUCCESS"    /tmp/m33mu-wolfhsm.log
-          grep -q "HKDF SUCCESS"                       /tmp/m33mu-wolfhsm.log
-          # App reached the success BKPT and m33mu trapped on it.
-          grep -q "\\[BKPT\\] imm=0x7d"                /tmp/m33mu-wolfhsm.log
-          grep -q "\\[EXPECT BKPT\\] Success"          /tmp/m33mu-wolfhsm.log
+      # The wolfHSM STM32H5 TrustZone integration is exercised by the
+      # nightly cross-repo job in wolfHSM
+      # (.github/workflows/wolfboot-tz-integration.yml), which builds
+      # this demo against the latest wolfHSM main and runs it under
+      # m33mu. It is intentionally not gated on every wolfBoot PR.
 
       - name: Clean and build test with DICE attestation + OTP (stm32h5)
         run: |