v0.4.3

v0.4.3 — apply stdin fix (audit follow-up)

Patch over v0.4.2. File-based apply/rollback workflows from v0.4.2
are unaffected; this fixes the pipe edge found by the Veyra Proof audit.

Fixed

• config apply consumed /dev/stdin (or any pipe) on its first read and
  then failed gating on the empty second read. It now reads the candidate
  once and gates from those bytes, with a dedicated regression test
  (apply_reads_piped_stdin_once) alongside the audit's
  apply-stores-first-configuration scenario.
• Two Clippy lints in the new code (collapsible_if in history listing,
  needless_borrow in the SIGINT-shutdown test helper).

Scope honesty

Not declared production ready (Phase 9 gate pending): TCP + HTTP/1.1
only; apply/rollback manage versioned files offline, hot config
reload under traffic stays pending (S-CFG-01). 129 tests green (fmt,
Clippy -D warnings, full workspace suite, per-artifact release E2E with
live proxied traffic, Veyra Proof audit).

Verify

shasum -c SHA256SUMS.txt
./eqproxy-darwin-arm64 --version  # eqproxy 0.4.3