feat(mesh): Yggdrasil extended peer discovery + bugfixes
## New Features
- secubox-app-yggdrasil-discovery: Mesh peer discovery via gossip protocol
- yggctl CLI: status, self, peers, announce, discover, bootstrap
- Auto-peering with trust verification (master-link fingerprint)
- Daemon for periodic announcements
## Bug Fixes
- tor-shield: Fix opkg downloads failing when Tor active
- DNS over Tor disabled by default
- Auto-exclude public DNS servers from iptables rules
- Excluded domains bypass list (openwrt.org, pool.ntp.org, etc.)
- haproxy: Fix portal 503 "End of Internet" error
- Corrected malformed vhost backend configuration
- Regenerated HAProxy config from UCI
- luci-app-nextcloud: Fix users list showing empty
- RPC expect clause was extracting array, render expected object
## Updated
- Bonus feed: All IPKs rebuilt
- Documentation: HISTORY.md, WIP.md, TODO.md updated
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>