Arti runtime integration
This is a rather large ticket but at the moment, we are able to route onionmasq traffic through the Tor network using arti.
But we need to go one step further. In particular, build a custom runtime so we can hijack any TCP connection that arti does (Guard or Fallbackdir connections) and put those on an allowlist as in not proxied as VPN traffic.
This work is still in the exploration phase and PoC but very likely to end up in the final product hence this ticket.