MClash 1.5.2

MClash 1.5.2

This fix-forward patch keeps the native-only 1.5.x runtime and makes the
legacy compatibility integration smoke explicit about environments without an
entitled Network Extension relay endpoint. The relay path remains available
to dedicated hosts through MCLASH_REQUIRE_APP_ROUTING_CONTINUITY=1; ordinary
CI compatibility checks no longer report a false failure when that optional
endpoint cannot be published.

Native routing, native DNS, node-only profile import, MClash-owned entrances,
proxy-group composition, terminal Direct/Reject handling, and bounded traffic
observations are unchanged.