Minimal Router OS v0.1.2

What's Changed

Other changes

• Sync latest minimalrouterhome changes by @vladimirperovic in #49
• fix(security): hardening pass — config isolation, extra-LAN lockdown, wg1 boot restore by @vladimirperovic in #50
• fix(hardening): second hardening round — boot safety, transaction ordering, anti-lockout by @vladimirperovic in #51
• Scenario hardening and cross-component safety by @vladimirperovic in #52
• feat(lab): full validation suite — 40 scenarios, signed updates, hardening by @vladimirperovic in #54
• fix(lab): deploy/configure reliability + lab debug notes by @vladimirperovic in #55
• feat(firewall): tunnel-only port forwards (WireGuard DNAT) by @vladimirperovic in #56
• fix(applyd): detect inadyn fatal provider responses despite exit 0 by @vladimirperovic in #57
• fix(applyd): sanitize zero-exit DDNS provider failures by @vladimirperovic in #58
• fix: close final update and firewall verification release blockers by @vladimirperovic in #60
• fix: reject root-only signed payload executables by @vladimirperovic in #63
• fix: reject unreadable signed web payload modes by @vladimirperovic in #64
• docs: refresh validation status after final hardening audit by @vladimirperovic in #62
• fix: close second-pass update and repository hardening gaps by @vladimirperovic in #65
• feat(web): port forward management panel (tunnel-only) by @vladimirperovic in #72
• feat(lab): scenarios 41-50 + fix 36/38 by @vladimirperovic in #73
• feat: sync v0.1.2 and publish dashboard demo by @vladimirperovic in #78
• fix: install-dist mv -fT (BusyBox symlink sledjenje pri reinstalaciji) by @vladimirperovic in #79
• fix: harden sessions, Pages demo and repository hygiene by @vladimirperovic in #80

Full Changelog: v0.1.1...v0.1.2