Claude review: gpu: nova-core: gsp: tu102: keep unloading if FWSEC-SB fails

[Claude Code Review Bot <claude-review@example.com>]

Patch Review

**The problem:** The original code early-returns on FWSEC-SB failure via `?`:
```rust
self.fwsec_sb.run(dev, bar, gsp_falcon)?;
```
This prevents the Booter Unloader from running, leaving the GSP in a partially-unloaded state.

**The fix has two parts:**

1. **FWSEC-SB error capture:** Instead of propagating immediately, the error is captured and logged:
```rust
let fwsec_sb_res = self
    .fwsec_sb
    .run(dev, bar, gsp_falcon)
    .inspect_err(|e| dev_err!(dev, "FWSEC-SB failed to run: {:?}\n", e));
```
Using `inspect_err` is clean — it logs the error at the point of occurrence while preserving the `Result` for later.

2. **Booter Unloader wrapped in a closure:** The WPR2 check and Booter Unloader execution are wrapped in an immediately-invoked closure to capture its result:
```rust
let booter_unloader_res = (|| {
    if !wpr2_hi.is_wpr2_set() {
        return Ok(());
    }
    // ... falcon reset, load, run ...
    Ok(())
})();
```
The closure inverts the condition from `if wpr2_hi.is_wpr2_set()` to `if !wpr2_hi.is_wpr2_set() { return Ok(()); }` — this is a reasonable transformation to allow `?` usage inside the closure body while keeping the early-exit-on-no-work semantic.

3. **Error combination:** Both results are combined with:
```rust
fwsec_sb_res.and(booter_unloader_res)
```

**One minor observation on error precedence:** `Result::and` returns the first `Err` it encounters (checking `self` first). So if *both* FWSEC-SB and Booter Unloader fail, only the FWSEC-SB error is propagated to the caller. The Booter Unloader error is silently discarded. This is probably acceptable since:
- The FWSEC-SB error is already logged via `inspect_err`
- But the Booter Unloader error is *not* logged before being dropped

It might be worth adding an `inspect_err` on the Booter Unloader closure result too, so that if both fail, the caller sees the FWSEC-SB error (via `and`) but the Booter Unloader failure is at least visible in dmesg. As-is, if both fail, the Booter Unloader error vanishes silently. However, this is a minor nit — the important fix (continuing despite FWSEC-SB failure) is correct.

**Reviewed-by assessment:** The patch is correct and addresses a real bug. The immediately-invoked closure pattern is a pragmatic way to scope `?` usage in Rust without extracting a separate function. The commit message clearly explains the rationale. This is good to go, with the optional suggestion to also log Booter Unloader failures for completeness.

---
Generated by Claude Code Patch Reviewer