v1.0.41 — Firewall bidirectional forwarding, link-proof relay

v1.0.41 — Firewall bidirectional forwarding, link-proof relay

Fixes

• Link-proof forwarding: PROOF packets on established links now forwarded through firewall
• Reverse hash whitelisting: Both forwarding sites now whitelist truncated_hash for return path
• Proof firewall exemption: PROOF packets from backbone bypass whitelist check entirely
• Announce rebroadcast: Announces go to ALL interfaces (no attached_interface restriction)
• Timestamp-on-load reset: All saved paths marked stale on boot (no NTP dependency)
• Static frame_buf: TcpInterface stack allocation moved to BSS (prevents stack overflow)
• Echo prevention: TcpInterface skips sender client to prevent loopbacks

Architectural

• DISCOVERY_ADD system fully removed in FIREWALL_MODE
• All upstream mode dependencies stripped (no boundary/roaming checks)
• Boundary→Firewall rename complete across codebase
• WATCH_LOG system for targeted watched-destination diagnostics
• Interface::isConnected() virtual added

Assets

• rtnode_heltec_v3.bin, rtnode_heltec_v3_merged.bin
• rtnode_heltec_v4.bin, rtnode_heltec_v4_merged.bin