Just boot.firm.
You don't need it on the SD card if you have it in ctrnand, but it's a good idea anyway.
Also you'll probably want to rerun DSP1/dspdump and get some CIAs back like Luma Updater, Themely, FreeShop etc. Check the last part of 3ds.guide where the "essential" CIAs are listed.