fix(updates): prevent downgrade due to CDN caching issues for recent index updates

fix(interop/ivpn): Handle local service port connections

fix: avoid error "config: request for unregistered option: spn/enable"

interop/ivpn: suppress network-derived location while VPN is active

interop/ivpn/windows: bind SPN connections to physical interface on Windows

Merge branch 'development' into fix/spn_bypass_ivpn

firewall/Linux: add MarkAcceptFinal to bypass third-party iptables OUTPUT rules for Portmaster-owned connections

fix(dependencies): update ivpnclient module version to v0.0.0-20260326085211

ivpn/linux: route SPN hub traffic around VPN tunnel (split tunnel)

fix(ivpn): add Linux WireGuard SPN compatibility fallback for iptables raw rules

fix(ivpn): add event handlers and Linux WireGuard SPN compatibility nft rule

fix(firewall;interop/ivpn): apply external verdict handler in all connection filtering paths

fix(ivpn): update VerdictHandler to return skipTunnel flag for better handling of connections

feat(interception; Linux): ensure iptables jump rules remain at top of chains on startup

fix(interception): streamline rule insertion logic in activateIPTables