EvilWAF / nowafplsV2 gap closures:
- Body padding (8KB/16KB cloud-WAF inspection bypass)
- TLS profile rotation pool (--tls-impersonate-rotate)
- Per-request connection-reuse off (--no-conn-reuse)
- Real-time TUI dashboard (--tui)
- Better xorshift padding alphabet (defeats Naxsi RX rules)
- Body-padding wired into EvasionConfig::maximum() so wafrift scan and
  bench-waf use it automatically.

Bench across all 7 local stacks at wafrift-bench/results/v022-*.json.

Full notes: CHANGELOG.md, docs/TLS_PARITY.md.