feat(aiturk): phone link works from any network through an end-to-end encrypted tunnel (1.0.0-beta.16)

The phone link no longer depends on the local network. The IDE dials out to
turkservis.online and bridges tunnel streams to its own TLS proxy on
loopback; the phone runs TLS to the pinned IDE certificate inside the
tunnel, so the relay only carries ciphertext. The proxy binds to 127.0.0.1
by default and enabling the feature never asks for a firewall rule; direct
same-network access is an explicit option. The window shows the real relay,
listener and firewall state, and pairing no longer needs local addresses.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01B8ppceaR5s6cvMnm7uGRnf

apps/desktop/electron/mobile-host.html

@@ -6,7 +6,12 @@
 <label class="switch"><input id="enabled" type="checkbox"><span id="t-enabled"></span></label>
 <p id="notice" class="status" role="status" aria-live="polite" hidden></p>
 <section id="remote-box" class="warning" hidden><p id="t-remote"></p></section>
-<section id="firewall-box" class="warning" hidden><p id="firewall-text"></p><button id="firewall-retry" class="secondary"></button></section>
+<section id="status-box" hidden>
+<div class="status-row"><span id="t-relay-label"></span><strong id="relay-status" role="status" aria-live="polite"></strong></div>
+<div class="status-row"><span id="t-lan-label"></span><strong id="lan-status" role="status" aria-live="polite"></strong></div>
+<div class="status-actions"><button id="lan-allow" class="secondary"></button><button id="lan-disallow" class="link" hidden></button></div>
+</section>
+<section id="reissued-box" class="warning" hidden><p id="t-reissued"></p></section>
 <section id="pair-section" hidden>
 <button id="pair-begin"></button>
 <div id="pair-live" hidden>
@@ -16,6 +21,7 @@
 <p id="pair-code" class="code" aria-live="off"></p>
 <p id="pair-code-path"></p>
 <p id="pair-countdown" class="countdown"></p>
+<p id="pair-security" class="security"></p>
 <p id="t-same-wifi" class="hint"></p>
 <button id="pair-cancel" class="secondary"></button>
 </div>
@@ -23,5 +29,5 @@
 <section id="devices-section" hidden>
 <h2 id="t-devices"></h2><p id="devices-empty"></p><div id="devices"></div>
 </section>
-<footer id="footer" hidden><small id="footer-info"></small> <button id="firewall-remove" class="link"></button></footer>
+<footer id="footer" hidden><button id="relay-renew" class="link" hidden></button> <button id="firewall-remove" class="link" hidden></button></footer>
 </main><script type="module" src="mobile-host-ui.mjs"></script></body></html>