fix(daemon): preserve Gateway readiness during PF drift

[munezaclovis]

Summary

• inspect loaded PF redirects recursively without invoking sudo, including non-PV rules that target assigned Gateway ports
• use PV-owned HTTP/HTTPS identity probes for active or uncertain public routing and backend probes only for authoritatively inactive routing
• keep owned Gateway processes running when PF is drifted or unknown, while recording focused pv ports:install repair guidance
• remove the prepared-file shortcut that could select a doomed 60-second public readiness probe

Test plan

• cargo test -p platform --lib active_pf_redirect_inspection -- --nocapture
• cargo test -p daemon --lib 'gateway::tests' -- --nocapture
• cargo test -p daemon --test supervisor_foundation gateway_identity_readiness -- --nocapture
• cargo nextest run -p daemon --test gateway_reconciliation --no-fail-fast
• cargo clippy -p platform -p daemon --all-targets --all-features --locked -- -D warnings
• cargo fmt --all -- --check

Depends on #316.

Closes #304.
Closes #305.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: a304c696-5bfa-4682-a1a6-2a7f27c670b5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codspeed-hq]

Merging this PR will not alter performance

✅ 7 untouched benchmarks

---

_{Comparing agent/fix-pf-gateway-readiness (7ece4ca) with agent/design-pf-health-recovery (99931bb)}