feat: harden firewall policies telemetry and operations

Implement reliable agent apply, telemetry v2, analytics retention, guarded rollouts, enrollment, labels and webhooks. Improve ReUI frontend data safety and bounded list loading, and add Docker smoke, recovery and resource checks. Document local verification and pending native acceptance.

packages/db/migrations/015_override_expiry.sql

@@ -0,0 +1,5 @@
+ALTER TABLE ip_overrides ADD COLUMN reason TEXT;
+ALTER TABLE ip_overrides ADD COLUMN created_by_name TEXT;
+ALTER TABLE ip_overrides ADD COLUMN expires_at TEXT;
+ALTER TABLE ip_overrides ADD COLUMN expired_at TEXT;
+CREATE INDEX idx_overrides_agent_expiry ON ip_overrides(agent_id, expired_at, expires_at);