feat: webpki TLS, PT spec compliance, and privacy improvements

41_unrequested to merge
feat/webpki into main
  • Switch to webpki-roots for cross-platform certificate verification
  • Add connection ID logging in place of client IP addresses (PT spec Anonymity Considerations compliance: SHOULD NOT log client IPs)
  • Write uat_bridgeline.txt at server startup for test harness integration
  • Fix PROXY-ERROR handling to emit CMETHODS DONE before bailing
  • Add ExtORPort auth cookie validation per PT spec
  • Add QUIC multiplexing verification test (test/multiplex.py)
  • Update README with bridge setup instructions and PT spec compliance table

Merge request reports