fix(start-os): map ports over TCP and UDP

[remcoros]

Summary

StartOS automatically maps only requested TCP ports, preventing UDP services such as WireGuard from being exposed through PCP, NAT-PMP, or UPnP.

This change:

• Requests both TCP and UDP for standard port mappings
• Tracks each protocol independently for renewal and removal
• Keeps SNI hostname mappings TCP-only

Validation

• cargo check -p start-core --lib
• cargo build -p start-core --lib
• 15 targeted port-mapping tests passed

Manual testing

On a fresh 0.4.0.1 box + this patch:

• installed wireguard-startos (https://github.com/remcoros/wireguard-startos)
• enabled public address :51820
• observed in my router that both a TCP and UDP rule were added, whereas before, only TCP was added.