Fixes and additions
- Correct Network event API retry detection and port-forward protocol/source/destination handling.
- Fix Access event time filters, scoped filtering, overlapping pagination and bounded completeness checks.
- Add shared voucher/device projections and verified controller operations for fixed AP, content filters, mDNS and V2 NAT.
- Add typed read-only IPS/DPI settings with strict field allowlisting.
- Preserve existing Core NAT return contracts; new verified operations are additive.
Validated with full tests, independent review, and a merged-main live matrix across Network, Protect, Access and REST/GraphQL. Disposable writes verified configuration persistence and cleanup, not packet enforcement. VPN alternate-address controls are excluded.
App features are delivered in the following Network/API release batch; this library release provides their prerequisites.