It should be harder to flash a production RoT image onto an unprovisioned RoT #290
Description
Right now, if you flash oxide-rot-1/app.toml onto an RoT programmed with the Bart keys, it will hang at startup because it's trying to go through the manufacturing flow.
This is annoying, because you have to physically attach a debugger to recover it (by flashing oxide-rot-1/app-dev.toml).
It's not obvious how to fix the issue, because both images have the same board name (oxide-rot-1).