Release 2.7.3.1: harden proxy recovery, updates and local API.

Restore orphaned system proxy after crash, require update SHA-256, add macOS /api auth token, fix UDP ping false positives, HTTPS-only subscriptions, and keep the UI responsive during connect.

Co-authored-by: Cursor <cursoragent@cursor.com>

internal/sysproxy/darwin.go

@@ -82,7 +82,16 @@ func (c *darwinController) Disable() error {
 	if !c.enabled {
 		return nil
 	}
-	services := c.services
+	return c.disableServices(c.services)
+}
+
+func (c *darwinController) ForceDisable() error {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	return c.disableServices(nil)
+}
+
+func (c *darwinController) disableServices(services []string) error {
 	if len(services) == 0 {
 		var err error
 		services, err = listNetworkServices()