Added

Adds a native Rust Deep Capture proxy foundation with a library-owned, loopback-only listener, finite connection and task capacity, typed observation, complete shutdown accounting, and idempotent cleanup. The functional command-line path remains on external mitmdump until the tracked native protocol and integration work is complete.

Completes the secure native Deep Capture foundation with authenticated loopback admission, bounded upstream policy, session-owned certificate and trust state, loss-accounted raw observations, and an offline protocol lab covering every required family and failure class. Production protocol inspection remains on the external backend until the tracked cutover.

• Native Deep Capture now owns authenticated HTTP/1.1 forwarding, CONNECT, client-facing TLS under the exact session authority, and a separately verified upstream TLS connection.
• The controlled protocol path now drives real native HTTP and HTTPS traffic through the public facade and CLI without Python, a capture driver, a game account, remote service, or operating-system trust mutation.
• Native protocol observations retain bounded loss accounting and distinguish HTTP, CONNECT, client TLS, upstream TLS, and terminal failure boundaries.