Add OneKey Classic 1S to wallet list

[Shoyo1024]

This PR adds the OneKey Classic 1S hardware wallet to the wallet list, incorporating all feedback from the previous review at #4439 by @crwatkins.

Per @crwatkins's recommendation, this PR covers only the OneKey Classic 1S. OneKey Pro will be submitted in a separate PR once the remaining items on that device are resolved.

Firmware reviewed: v3.18.0 (https://github.com/OneKeyHQ/firmware-classic1s/releases/tag/v3.18.0)

Issues from #4439 addressed in this PR

• Transparency score updated to checkpasstransparencyopenspechardware (per @crwatkins's recommendation, reflecting that the THD89 secure element is closed source while a public interface specification is now available for blackbox testing).
• Description no longer claims "fully open source" — it now accurately describes the firmware as open source.
• "Secure Elements" lowercased to "secure elements".
• "Open-source" rewritten without the hyphen for consistency with the rest of the wallet list.

Issues from #4439 addressed outside this PR

• THD89 secure element interface specification is now public: https://github.com/OneKeyHQ/firmware-pro/blob/doc/OneKey_SE_Command_Reference.md
• HSTS is now enabled on onekey.so, and obsolete TLS protocols have been disabled (only TLS 1.2 and 1.3 are accepted).
• Reproducible build has been independently verified by Wallet Scrutiny: https://walletscrutiny.com/hardware/onekey.classic.1s/#verificationId=76252345ad4278aa8d51fc6e94f67db75c74d179797df6ca5ea923b3ae9c9dba
• Bitcoin address reuse: the OneKey companion app now uses fresh receive and change addresses by default as of v5.16.0.

cc @crwatkins

[crwatkins]

These updates look good with one small exception:

• New listings: With a max-age of at least 1 year, and preload and includeSubDomains directives to qualify for browser preload list inclusion e.g. Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

onekey.so presents a max-age=15552000

Once this is corrected, I will happy to recommend OneKey Classic 1S for listing.

[Shoyo1024]

Hi @crwatkins , just updated the HSTS header on onekey.so to max-age=31536000; includeSubDomains; preload. Should be good now.

[crwatkins]

Looks good. I recommend OneKey Classic 1S for listing.

(You may want to consider preloading onekey.so at https://hstspreload.org/)

[Shoyo1024]

Thanks Craig. Will get the HSTS preload submitted shortly.

[Shoyo1024]