{"service":"izemium-tun","mode":"selfhost","relay":"145.241.161.95:8890","transport":"quic (ML-KEM-768 + fleet mTLS)","note":"WSS pairing is vendor-mode only; selfhost clients use the relay address from their enrollment token"}