Redundant senses

Autonomy is only as safe as what the aircraft can sense. We added redundant IMUs and a voting scheme so no single sensor can mislead the flight controller. If one disagrees, the others out-vote it. Safe means safe even when a part misbehaves.