Deploy redesigned ProxyEngine to edge server

Deploy ProxyEngine commit 9018e09 from PR #6 to edge server 5.161.243.214 as a self-contained Native AOT linux-x64 executable. Constraints: - Do not stop or restart the existing prk-proxy service before 2026-10-27 08:38 CET (07:38 UTC). - Stage and verify artifacts before the window without affecting the running service. - Preserve rollback copies of the prior binary and unit. - Atomically install the self-contained Native AOT linux-x64 binary and hardened unit, daemon-reload, restart once, and verify service state, all six listeners, process identity, startup logs, and public/backend path where safely possible. Acceptance: old service remains uninterrupted before the window; deployment is a verified Native AOT build from commit 9018e09; new service is active without restart loop; ports 7000, 7005, and 8501-8504 listen; rollback artifacts and validation outcome are recorded. Completed 2026-10-27: - The old service remained active on PID 146720 with zero restarts through 07:38:01 UTC; no stop or restart occurred before the 08:38 CET boundary. - Built Native AOT linux-x64 from commit 9018e09 with zero warnings. Local smoke startup opened all six listeners and terminated cleanly on SIGTERM. Binary SHA-256: 5d6f435266050f0f4c32511ef195e2f8062d080b743f604221b1557deb1ac218; size 3,898,104 bytes; remote ldd resolved only libc/libm/loader. - All six Ithaca endpoints were reachable before deployment. Backed up the old binary and unit to /opt/prk-proxy/rollback-20261027T0738Z, atomically installed the AOT binary and hardened unit, daemon-reloaded, and restarted at 07:38:29 UTC. - New service is active on PID 1923147 with NRestarts=0. All six listeners are present and externally reachable; startup logs confirm each expected backend mapping and live client sessions successfully reached backends immediately after restart. - Delayed validation showed stable PID, approximately 7 MB cgroup memory current / 15 MB RSS, and enforced MemoryMax=512M, TasksMax=1024, LimitNOFILE=65536. Installed provenance is recorded in /opt/prk-proxy/DEPLOYED. Temporary staging artifacts were removed. - User confirmed a successful real game login after deployment and reported normal behavior.