enable stack protector

[mbrousset-ledger]

Checklist

• App update process has been followed
• Target branch is develop
• Application version has been bumped

$ find build -type f -name 'app.elf' | xargs -I{} bash -c "echo {}; nm {} | grep 'stack'"
build/stax/bin/app.elf
da7a0de4 B app_stack_canary
da7a9000 B _estack
da7a0de8 B _stack
da7a0000 B __stack_chk_guard
c0deabd1 T __wrap___stack_chk_fail
c0de0001 T __wrap___stack_chk_init
build/apex_p/bin/app.elf
da7a0de4 B app_stack_canary
da7aa000 B _estack
da7a0de8 B _stack
da7a0000 B __stack_chk_guard
c0dea9dd T __wrap___stack_chk_fail
c0de0001 T __wrap___stack_chk_init
build/nanox/bin/app.elf
da7a09a8 B app_stack_canary
da7a7000 B _estack
da7a09ac B _stack
da7a0000 B __stack_chk_guard
c0de6519 T __wrap___stack_chk_fail
c0de0001 T __wrap___stack_chk_init
build/nanos2/bin/app.elf
da7a0990 B app_stack_canary
da7aa000 B _estack
da7a0994 B _stack
da7a0000 B __stack_chk_guard
c0de649d T __wrap___stack_chk_fail
c0de0001 T __wrap___stack_chk_init
build/flex/bin/app.elf
da7a0de4 B app_stack_canary
da7a9000 B _estack
da7a0de8 B _stack
da7a0000 B __stack_chk_guard
c0deab11 T __wrap___stack_chk_fail
c0de0001 T __wrap___stack_chk_init

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.44%. Comparing base (360e815) to head (1a17816).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #212   +/-   ##
=======================================
  Coverage   72.44%   72.44%           
=======================================
  Files           5        5           
  Lines          98       98           
  Branches       22       22           
=======================================
  Hits           71       71           
  Misses          9        9           
  Partials       18       18           

Flag	Coverage Δ
unittests	72.44% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Enables stack protection in the app build configuration (and bumps the patch version) so produced binaries include stack canary/stack-check support as part of the standard build.

Changes:

• Bump application patch version from 2.3.1 to 2.3.2.
• Enable stack protection by setting ENABLE_STACK_PROTECTOR in the main Makefile.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Code coverage report

Per-file coverage

Package	Line Rate	Branch Rate	Health
src.transaction	85%	58%	✔
Summary	85% (50 / 59)	58% (28 / 48)	✔