Fix in-air restarts, protect against an external MAVLink sender exploiti...

...ng the restart mechanism.

@thomasgubler This is high priority, as in-air restarts had been broken. This will likely also improve the HIL experience, since a reboot without power cycle would let the board run into a failed restart. 60 mins for this one 8).