f2f15eb17e
Cell link [Peer] blocks can vanish from wg0.conf after a container rebuild or config reset. The startup recovery previously only restored VPN peer rules (iptables) but not the WireGuard peer blocks needed for cell-to-cell tunnels, leaving the link red with no automatic recovery. Add _restore_cell_wg_peers() called from _apply_startup_enforcement() that reconciles wg0.conf against cell_links.json and re-adds any missing [Peer] blocks, then calls _syncconf() to hot-reload the interface. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>