v1.4.0 — Enhanced Dashboard, Dual-Stack WAN & Enrichment Fixes

What's New

Dashboard Overhaul

• Replaced hand-rolled bar charts with Recharts area charts — smooth, interactive, with tooltips
• New Traffic by Action stacked area chart showing allow/block/redirect over time
• Adaptive time bucketing — charts scale from hourly to daily to weekly based on selected range
• Combined Top Countries panel showing blocked + allowed side-by-side
• Colored log type labels in the stat card breakdown
• Unified panel grid layout

WAN & Gateway IP Intelligence

• Dual-stack WAN detection — IPv4 and IPv6 WAN IPs detected and excluded from stats
• Gateway IP detection — auto-discovers gateway internal IPs from _LOCAL firewall rules
• Gateway IPs excluded from "Top Active Internal IPs" to show real client traffic
• WAN IPs excluded from allowed destination stats; multicast/loopback IPv6 ranges filtered

Enrichment Fixes

• WAN IP enrichment fix — one-time migration re-enriches historical logs incorrectly enriched on your own WAN IP
• Backfill daemon skips WAN and IANA reserved IPs when patching threat scores from cache
• API detail endpoint excludes WAN and IANA reserved IPs from ip_threats joins
• Direction-aware manual enrich button picks the correct remote IP

UI Polish

• New logo
• Unified dark backgrounds (bg-gray-950) across all modals, dropdowns, and menus
• Network path column shows "External" label for missing inbound interface

Infrastructure

• Dynamic version management via VERSION file — CI writes git tag, no more hardcoded strings