Stack-allocate the two mbedtls DES contexts in loclass optimized_elite (128 bytes each) and the APDU runner progress text buffer (24 bytes). All three were static/global but are used only within single call frames.