Broccoli 0.2.3

What's Changed

• Offer the rule editor's inbound tags as a selector (6f01f1f)
• A congested swapchain acquire cannot cost the device (417ce1c)
• Write only the state file whose bytes changed (a02ea28)
• Judge every decoded value the way the pinned core does (1905c7f)
• Gate the freedom fragment and noises blocks where the core refuses them (d752822)
• Warn on the dokodemo shapes the core starts with (10f36e8)
• Fold wire vocabularies the way Go lowercases them (218da83)
• Raise the WireGuard rules in the model pass (61e1dc9)
• Import the client-issued link schemes Xray supports (2915496)
• Shield a TUN session's whole egress, fail closed from the first moment (9a9ef7f)
• Move ambient UI explanation into hover tooltips (48e41e2)

Full Changelog: v0.2.2...v0.2.3

1. Trimmed the GUI's small explanatory text into hover tooltips and silenced the probe-payload log line.
2. Fail-closed WFP shield: pre-adapter block install, IPv6 kill-switch, per-install sublayer key, top-bar warning.
3. Import now accepts socks5/http(s)/wg/hysteria2 links too, warning on unmappable parameters; export unchanged.
4. Fixed a bug that caused the app to crash under high load. (after 25045a1)
5. Fixed inbound tag selector missing in routing tab

I. WireGuard rules moved into the model pass, vocabularies fold like Go, and dokodemo findings the core starts with now warn.
II. The app now judges values exactly as the pinned core does: freedom fragment/noises moved into the model pass, and every base64/range decode shares one Go-faithful helper.
III. Saves now rewrite only the state file that actually changed; keeping them on the UI thread stands, with a concrete trigger to revisit.