v1.0.5

• Added persisted LAN groups with atomic batch membership updates and capability detection
• Added fail-closed iptables isolation for inter-client traffic across all AWG interfaces
• Added the configured VPN subnet explicitly to every generated client AllowedIPs