Connect reliability, measured before release:
- Cold start: the wallet races two mixnet entry-gateway connects and takes the
  first up, so a dead random draw no longer costs the full timeout (dead-round
  rate drops from p to p^2; verified across 30 cold trials).
- Dead exits are condemned in ~10s instead of ~32s (fresh-tunnel probe budget
  5s x 2 rounds, 4.2x margin over the worst measured healthy probe), removing
  the 50-70s worst-case connects. Established-tunnel keepalive unchanged.
- "Connecting relays..." clears in ~2-4s after saving the relay list (the
  Connected flag now tracks the real relay-up signal instead of waiting on a
  30s catch-up fetch); identity publishes are time-boxed; the onboarding
  Claim button un-gates equally sooner.
- Gateway-race and probe timings are now visible in [timing] logs.

Also: the update banner shows Goblin build numbers (not the inherited 0.3.6),
and the nip44 crate is consumed from crates.io (v0.3.0) - no sibling checkout
needed to build.