v0.8.15-multicore

Build a backend off the controller lock, 0600 configs, count stats successes

Final-audit hardening: AttachBackend no longer holds the controller lock
across the version probe; staged sing-box config is 0600; StatsAll keys the
all-failed decision on delivered-backend count, not payload size.