AP_IOMCU: handle watchdog reset in IO firmware

libraries/AP_IOMCU/iofirmware/iofirmware.cpp

@@ -176,6 +176,11 @@ void AP_IOMCU_FW::init()
 
     // we do no allocations after setup completes
     reg_status.freemem = hal.util->available_memory();
+
+    if (hal.util->was_watchdog_safety_off()) {
+        hal.rcout->force_safety_off();
+        reg_status.flag_safety_off = true;
+    }
 }