v1.1.0

• Router.hostnames parses Host()/HostSNI() out of a rule.
• Certificate.sans + covers(), and Metrics.certificate_for() prefers the tightest match.
• Per-service and per-entrypoint request counts, errors, and durations as TrafficStats; per-entrypoint open connections.
• Exact metric-family matching keeps the latency histograms skipped.