Covers 7 issues: WireGuard tunnel, zapret/nfqws for DPI, SNI protection,
dnscrypt-proxy, HSTS, SSE timeout, wstunnel fallback. Includes commands,
verification checklist, and rollback for each step.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>