Web UI, packaging, systemd units, installer scripts, namespace integration tests

React/TS analyser (virtualised packet list, protocol tree, verified hex mapping),
setup wizard, network/devices/health/library/settings pages. Installer with
backup and rollback, uninstall/repair/diagnose. Docker+netns integration suite
covering DHCP, DNS, NAT, isolation, IPv6 blocking, capture and export.

systemd/pilens-firewall.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=PiLens firewall restore (before networking)
+Documentation=file:/opt/pilens/docs/architecture.md
+DefaultDependencies=no
+After=local-fs.target nftables.service
+Before=network-pre.target NetworkManager.service
+Wants=network-pre.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+# Loads only the "inet pilens" table from the last successfully applied configuration.
+ExecStart=/opt/pilens/bin/pilens-helper -boot
+
+[Install]
+WantedBy=multi-user.target