niwaki v0.14.15

Added

• Fabric switch profiles, module cards and vPC protection. The fabric root
  gains leaf_path_selector, spine_path_selector, override_leaf_selector and
  override_spine_selector makers; leaf and spine switch profiles bind their
  module_profile (FEX card); the vPC explicit protection group binds its
  vpc_policy; and switch event/fault/health retention policies are declarable.
• Management and DHCP node-group associations. Management, DHCP and
  deployment-zone pod groups bind their node groups (management_group,
  node_group); DHCP node groups bind their dhcp_relay policy; DNS server
  groups bind their epg; and bridge domains gain a dhcp_relay_label maker.
• Observability — monitoring sources, syslog destinations, SPAN and
  retention. EPG monitoring policies gain the SNMP/syslog/callhome/TACACS
  sources plus lifecycle_policy and stats_limit_pol (the latter two across
  every monitoring policy); syslog groups gain console, file and
  protocol_profile destinations; tenants declare VSPAN sessions and destination
  groups, whose destinations bind an EPG, path, APIC node or virtual port.

Coverage

Declarable-surface coverage after these fixes — curated positions against the
remaining in-scope backlog, by design domain:

Domain	Curated	In-scope gaps	Coverage
tenant	553	141	80 %
access	212	29	88 %
fabric	206	36	85 %
controller	12	1	92 %
aaa	14	1	93 %
vmm	33	1	97 %
Total	1030	209	83 %

The 322 detected gaps split into 209 in-scope, 26 deferred (VMM,
Intersight and on-switch third-party integrations — these need a live backend to
verify) and 87 out of scope (imperative actions, Cloud Network Controller,
Nexus Dashboard Orchestrator / multi-site, and SD-WAN). Anything outside the
curated vocabulary stays reachable through .mo(Class, ...) and
bind_dn(alias=dn).