Release notes

• Controller reachability check no longer rolls back a healthy tunnel on a transient probe failure. The agent resolves the controller hostname via a public DNS chain so a tunnel-pushed resolver outage no longer blocks connect.
• Fixed an intermittent login / register failure that surfaced as "error reading response body: context canceled" on busy networks.
• "Trust this certificate?" prompt only fires for genuine certificate-trust events (unknown CA, hostname mismatch, invalid cert). Transport failures (DNS, TCP, timeout) route back through the reconnect loop. The prompt also cancels cleanly on Disconnect / Reset / Logout, fixing a stale rejection that could disconnect a healthy session seconds after connect.
• Clearer "Internal DNS unavailable" notification when the network's internal DNS server cannot be reached through the VPN; clears automatically once the resolver is back.
• VPN auto-recovers after a background service restart instead of flipping to Disconnected — no manual reconnect needed.
• Fixed a stuck white window on app close when the renderer was unresponsive; the app now force-quits after a short probe timeout.