fix: update patch-db (ciborium revert) and create /media/startos as 750

- Update patch-db submodule: fixes DB null-nuke caused by ciborium's
  broken deserialize_str, and stack overflow from recursive apply_patches
- Create /media/startos with mode 750 in initramfs before subdirectories

core/Cargo.lock

@@ -4345,7 +4345,6 @@ name = "patch-db"
 version = "0.1.0"
 dependencies = [
  "async-trait",
- "ciborium",
  "fd-lock-rs",
  "futures",
  "imbl",
@@ -4356,6 +4355,7 @@ dependencies = [
  "nix 0.30.1",
  "patch-db-macro",
  "serde",
+ "serde_cbor_2",
  "thiserror 2.0.18",
  "tokio",
  "tracing",
@@ -5793,6 +5793,15 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "serde_cbor_2"
+version = "0.13.0"
+source = "git+https://github.com/dr-bonez/cbor.git#2ce7fe5a5ca5700aa095668b5ba67154b7f213a4"
+dependencies = [
+ "half 2.7.1",
+ "serde",
+]
+
 [[package]]
 name = "serde_core"
 version = "1.0.228"