Upgrade xiloader to use json, add SHA-1 OTP support, upgrade CPM, mbedtls#39

zach2good merged 2 commits into

mainLandSandBoat/xiloader:mainfrom

json_junkLandSandBoat/xiloader:json_junkCopy head branch name to clipboard