Merge origin/main into the 0.5.0 redesign

Brings in 0.4.8: connection log, uninstall and update from the awg-ctrl menu,
secret panel path, stealth hub and sen:// port, random I1/MTU on install.
install.sh keeps the new output (spinner, cards, outdated-install wipe) on top
of the reorganised installer; an outdated install can be reinstalled with a
wipe or removed. The connection log tab uses the MD3 segmented button; its
metrics-token scrape snippet moved to Settings.

awg-ui/src/components/icons.tsx

@@ -132,6 +132,12 @@ export const IcoMore = () => (
     </svg>
 );
 
+export const IcoHistory = () => (
+    <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round">
+        <path d="M3 12a9 9 0 1 0 3-6.7L3 8"/><path d="M3 3v5h5"/><path d="M12 7v5l3 2"/>
+    </svg>
+);
+
 export const ICONS: Record<string, () => JSX.Element> = {
     settings: IcoGear,
     users: IcoUsers,
@@ -139,4 +145,5 @@ export const ICONS: Record<string, () => JSX.Element> = {
     shield: IcoShield,
     pulse:  IcoPulse,
     move:   IcoMove,
+    history: IcoHistory,
 };