build(amd-h): vendor GlobalPlatform exports for j3r452 builds

Drops gpapi-globalplatform 1.7 and gpapi-upgrade 1.1 (AMD-H Amendment H
v1.1) under applet/build-tools/gp-amdh/, sourced from
OpenJavaCard/globalplatform-exports (master snapshot 2020-09-30).

- dt-mvn.sh mounts exports/org/ into the converter's api_export_files/.
- pom.xml adds the .jar files as system-scope deps under the j3r452
  profile so javac on j3r452 builds resolves org.globalplatform.upgrade
  symbols (j3r180 builds don't see them on classpath).
- .gitignore: narrow build-tools/ exclusion to top-level only so the new
  applet/build-tools/gp-amdh/ tree is trackable while the top-level
  build-tools/jcardsim/ vendor fork stays out of the repo.

This commit alone produces zero CAP bytecode change because no current
source imports org.globalplatform.*. The infra is provably inert until
the Task 3.1+ source on feat/amd-h-epic-3-wip is merged. Verified by
diffing CAP zip components for both profiles: only the embedded
Java-Card-CAP-Creation-Time timestamp in META-INF/MANIFEST.MF differs.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

applet/pom.xml

@@ -164,6 +164,33 @@
                 <cap.elf.aid>A0000009094454414C49524F02</cap.elf.aid>
                 <cap.output.name>aliro-applet-j3r452.cap</cap.output.name>
             </properties>
+            <dependencies>
+                <!--
+                    GlobalPlatform AMD-H export JARs (system-scope, vendored
+                    under build-tools/gp-amdh/lib/). Scoped to this profile only
+                    so they never leak onto the j3r180 classpath. See
+                    build-tools/gp-amdh/README.md for provenance.
+
+                    system scope is deprecated in modern Maven but remains
+                    functional in 3.x and is the canonical pattern for
+                    locally-vendored JARs that we don't want to push through
+                    `mvn install:install-file` as a CI ordering step.
+                -->
+                <dependency>
+                    <groupId>org.globalplatform</groupId>
+                    <artifactId>gpapi-globalplatform</artifactId>
+                    <version>1.7</version>
+                    <scope>system</scope>
+                    <systemPath>${project.basedir}/build-tools/gp-amdh/lib/gpapi-globalplatform.jar</systemPath>
+                </dependency>
+                <dependency>
+                    <groupId>org.globalplatform</groupId>
+                    <artifactId>gpapi-upgrade</artifactId>
+                    <version>1.1</version>
+                    <scope>system</scope>
+                    <systemPath>${project.basedir}/build-tools/gp-amdh/lib/gpapi-upgrade.jar</systemPath>
+                </dependency>
+            </dependencies>
             <build>
                 <plugins>
                     <!--