infra: harden xlab and skydick networking

docs: record network infrastructure audit

docs: record implemented gateway optimizations (IPv4 egress, QoS, L7 DPI live) ...

IPv4 egress switch (347->65ms, live), wg-sgp-qos CAKE enabled (criterion 3),
DPI L7 confirmed live/scoped (corrects earlier inert mis-read), relay-RTT
Grafana panel. All 8 requested features now done or assessed.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

docs: gateway optimization & feature-feasibility assessment (2026-06-14) ...

Audit of .1 (R730, healthy) + feasibility of the requested features on the
current network. Key finding: abroad relay RTT 347ms (IPv6 mis-routed via LAX)
vs 65ms (IPv4 direct to Equinix SG) — IPv4 free here, blocked only by Oracle
security list. Plus L3-vs-L7 split, BT/exit QoS (CAKE), DNS-cage, RoCEv2-NFS
(already live), 10G-encrypted, Windows/Android handling. Relay-RTT Grafana panel
added.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>