fix: correct the GP privilege decode and remove the duplicate (v3.6.28)

The RAM explorer's ramFmtPrivileges used a private table with wrong bits and
invented names ("Cum Deletion Ctr", "GSM Card Binding", "Global PIN",
"RFM"/"CFM") and no case for 0x80: a live ISD 9E printed four wrong names
and dropped Security Domain.  Per GP Card Spec v2.3.1 11.1.2 Tables
11-7/8/9, 9E = Security Domain, Card Lock, Card Terminate, Card Reset, CVM
Management.

- ramFmtPrivileges now delegates to decodePrivileges (one spec table).
- decodePrivileges decodes byte 1's DAP pair per Table 11-7: b8+b7 = DAP
  Verification, b8+b7+b1 = Mandated DAP Verification; the flag bits alone
  are no privilege.
- The file had two decodePrivileges copies (the runtime used the later one,
  the C-APDU parser test the earlier); the duplicate and its private table
  are gone - the single implementation plus PRIVILEGE_NAMES live in the
  parser section, which the test evaluates (converted to var like PARSE_INS).
- Tests: 9E/9A live values, the DAP pair, byte 2/3 spot checks; the
  PRIVILEGE_NAMES spec pin moved to apdu_parse.

659 frontend / 504 Python green; version 3.6.28; sw simple-v301.

frontend/tests/response_map.test.js

@@ -48,14 +48,6 @@ test('LIFECYCLE_MAP per GPC v2.3 life cycles', () => {
 	assert.strictEqual(LIFECYCLE_MAP['83'], 'LOCKED (SD)');
 });
 
-test('PRIVILEGE_NAMES matches GPC v2.3 Tables 11-7/11-8/11-9', () => {
-	assert.strictEqual(PRIVILEGE_NAMES[0][7], 'Mandated DAP Verification');
-	assert.strictEqual(PRIVILEGE_NAMES[1][2], 'Token Verification');
-	assert.strictEqual(PRIVILEGE_NAMES[1][7], 'Global Service');
-	assert.strictEqual(PRIVILEGE_NAMES[2][0], 'Receipt Generation');
-	assert.strictEqual(PRIVILEGE_NAMES[2][3], 'Contactless Self-Activation');
-});
-
 test('TS 51.011 SIM families resolve (94xx/98xx/92xx/9Exx/9Fxx)', () => {
 	assert.ok(lookupSw('94', '04', 'uicc').includes('not found'));
 	assert.ok(lookupSw('94', '00', 'uicc').includes('No EF selected'));