fix: WireGuard routing, DNS, service access, and UI improvements

- Fix CoreDNS not loading .cell zones (wrong Corefile path, now uses -conf flag)
- Fix WireGuard server address conflict (172.20.0.1/16 overlapped with Docker
  network; changed to 10.0.0.1/24 to eliminate duplicate routes)
- Add SERVERMODE=true and sysctls to WireGuard docker-compose for server mode
- Fix DNS zone file parser to handle 4-field records (name IN type value)
- Add get_dns_records() to NetworkManager; mount data/dns into API container
- Fix peer config endpoint: look up IP/key from registry, use real endpoint
- Add bulk peer statuses endpoint keyed by public_key
- Normalize snake_case API fields to camelCase in WireGuard UI
- Add port check endpoint (checks via live handshake, not unreliable TCP probe)
- Add Caddy virtual hosts for ui/calendar/files/mail .cell domains (HTTP only)
- Fix cell config domain default from cell.local to cell
- Fix Routing Network Config tab (was calling hardcoded localhost:3000)
- Fix DNS records display (record.value not record.ip)
- Move service access guide to top of Dashboard with login hints
- Add /api/routing/setup endpoint

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

webui/src/pages/Dashboard.jsx

@@ -18,6 +18,13 @@ import {
 } from 'lucide-react';
 import { cellAPI, servicesAPI } from '../services/api';
 
+const SERVICES = [
+  { name: 'Cell Home',   url: 'http://mycell.cell',    desc: 'Main UI — no login needed' },
+  { name: 'Calendar',    url: 'http://calendar.cell',  desc: 'Login: your WireGuard username' },
+  { name: 'Files',       url: 'http://files.cell',     desc: 'Login: admin / admin123' },
+  { name: 'Webmail',     url: 'http://mail.cell',      desc: 'Login: admin@rainloop.net / 12345' },
+];
+
 function Dashboard({ isOnline }) {
   const navigate = useNavigate();
   const [cellStatus, setCellStatus] = useState(null);
@@ -203,11 +210,29 @@ function Dashboard({ isOnline }) {
 
   return (
     <div>
-      <div className="mb-8">
+      <div className="mb-6">
         <h1 className="text-2xl font-bold text-gray-900">Dashboard</h1>
-        <p className="mt-2 text-gray-600">
-          Overview of your Personal Internet Cell status and services
-        </p>
+        <p className="mt-1 text-gray-600">Personal Internet Cell — connect via WireGuard to access services</p>
+      </div>
+
+      {/* Access Services — shown first, no scroll needed */}
+      <div className="mb-8">
+        <h2 className="text-sm font-semibold text-gray-500 uppercase tracking-wide mb-3">Services (connect via WireGuard first)</h2>
+        <div className="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-4 gap-3">
+          {SERVICES.map(svc => (
+            <a
+              key={svc.url}
+              href={svc.url}
+              target="_blank"
+              rel="noopener noreferrer"
+              className="card hover:shadow-md transition-shadow group border border-gray-100"
+            >
+              <p className="text-sm font-semibold text-primary-700 group-hover:text-primary-900">{svc.name}</p>
+              <p className="font-mono text-xs text-gray-400 mt-0.5 truncate">{svc.url}</p>
+              <p className="text-xs text-gray-500 mt-1">{svc.desc}</p>
+            </a>
+          ))}
+        </div>
       </div>
 
       {/* Cell Status */}