Fixes endpoint-guard supervision: the main watchdog now restarts endpoint-guard.sh if Android kills it or the PID file goes stale. This prevents the WireGuard endpoint route from silently falling back into tun0 after boot.\n\nSHA256: 7c3adcb390682b7ad27636210310b175cd0a997c460437a9183937cbd610a801