Security + reachability update. TURN credentials now require node enrollment (no open relay); new no-domain call mode (plain TURN on your public IP, no DuckDNS/cert); owner member management (list + remove guests); internal-disk install driven from the app.