Audit fixes: services after reload, diagnostics redaction, climatisation (0.4.2) - #10

Must fix
- Services climatisation_start/stop disappeared after any reload of the
  last entry (reauth and reconfigure reload it) until Home Assistant was
  restarted: they are registered once in async_setup and no longer
  removed on unload.
- Diagnostics leaked the exact position (GPS_LOCATION.location is a
  "lat,lon" string), the pairing code and key data (BLEID_DDADATA...):
  those values are now redacted as a whole.
- Climatisation is read from HVAC_SUMMARY through
  pyporscheconnectapi-bartolije 0.5.1 (CLIMATIZER_STATE no longer reports
  it); the climatisation_start zones come from the same measurement.

Should fix
- The config flow passes its own HTTP client (no zstd, no blocking SSL
  setup in the event loop) to the library, reused from the login step to
  the captcha step.
- Errors that are not about the credentials show "cannot_connect" instead
  of "invalid_auth".
- The device tracker is added on a later refresh when the car was in
  privacy mode at startup.
- Removed dead code: unreachable error handling after the first refresh,
  STARTUP_MESSAGE and its constants, the get_vechicle_data_leaf alias,
  async_reload_entry, CaptchaRequired, _reauth_entry and the lock's unused
  door_lock_state_available.

Nice to have
- The captcha is no longer written to the log.
- The climatise switch is disabled by default: the climate entity sends
  the same command.
- Empty picture locations are fetched again once a day instead of on
  every refresh.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>