fix: enforce unique routes and restore Russian bypass

docs: design bounded dynamic route cache

fix: report and repair actual tunnel mismatches

docs: plan truthful shared-IP routing

docs: design truthful shared-IP routing state

fix: finish loading for empty traffic payloads

docs: harden routing disable design

docs: design routing disable cleanup

fix: restore NDM groups through CLI fallback

fix: recover NDM startup and refresh frontend

fix: avoid focus shift during touch scroll

fix: restore focus after tunnel rail collapse

feat: collapse colored mobile tunnel rail

docs: plan mobile tunnel scroll collapse

docs: design mobile tunnel scroll collapse

chore: bump version to 2.1.1

fix: improve tunnel chip touch targets

feat: add mobile tunnel carousel

feat: add clear action to mobile domains

docs: plan mobile tunnel carousel

perf(registry): optimize _best_ip_owner_locked to use cached index and add tests

perf(registry): optimize _best_ip_owner_locked to use cached index and add tests

fix: batch hostnames + fail-fast domain_owner_snapshot

fix: batch hostnames + fail-fast domain_owner_snapshot

fix: быстрые имена устройств (boot NDM + dhcp binding)

fix: быстрые имена устройств (boot NDM + dhcp binding)

fix: StatePlane, app-rules lock, cascade AUTO при manual app tunnel

fix: StatePlane, app-rules lock, cascade AUTO при manual app tunnel

fix: pending на целевом туннеле, confirmed по любому apply

fix: pending на целевом туннеле, confirmed по любому apply

fix: RoutePlane, fact-only chip, soft /32 и brand identify

fix: RoutePlane, fact-only chip, soft /32 и brand identify

docs: installer/update/uninstall под NDM и git clone с GitVerse