Integration: 2026.w45

- #845 nrUE: Keep PHR eligible after the prohibit timer expires
- #842 Fix NULL dereferences in nrUE modlist_coreset() (#809)
- #792 NAS 5GMM: don't read past the message in mobile identity and Service Accept/Reject decoding
- #619 More fixes for UCI on PUSCH at UE
- #918 nrUE: Preserve the per-RB PDCCH channel estimate
- #863 e1ap: use unsigned 32-bit TEIDs
- #706 Fix uplink scheduling for late-starting DUs
- #912 nrUE: Drain TX successors before resynchronization
- #641 Update OAI CN5G to v2.2.2
- #910 gNB: wait for PUSCH workers before copying trace samples
- #948 fix(mac): guard against NULL DMRS config in nr_config_pusch_pdu
- #822 ngap: fix Served GUAMI, PLMN
- #780 doc: Add Benetel 550 4T2R n77 config with dynamic compression
- #953 fix: clamp the PUSCH and PUCCH RSSI to the FAPI range
- #479 use multi-dim arrays instead of manual computation
- #741 NR PRACH fixes
- #936 XNAP: add optional IEs to RAN Paging and Retrieve UE Context Failure
- #967 Channel pipeline via FFT + overlap-and-save
- #830 Introduce PRS physical simulator
- #952 Clean up NR physical simulators
- #979 NR UE: do not apply 24/32-port CSI-RS checks to 16 ports
- #871 nrUE: CPU reductions in rfsim with many UEs
- #794 ci: move cuda images to Ubuntu24.04 and CUDA 13.1
- #947 NRPPa: do not report periodic SRS resources as semi-persistent
- #753 F1AP lib: don't crash on malformed list items and extensions
- #821 Build with clang on aarch64
- #569 Add multicell support with Nvidia Aerial L1
- #507 Support for SRS 8 port configuration in the Physical layer
- #744 Reject re-establishment of a UE released by the core
- #909 nrUE: Reset frequency tracking history after acquisition

Closes: #809
Closes: #791
Closes: #929
Closes: #703
Closes: #743