v0.7.2-beta1: wg_rejected_total diagnostic counter Instruments boringtun's decapsulate-rejection path (per-link and daemon-wide lifetime counters), surfaced in mlvpn-tui and diag-dump. Built to help root-cause a live ~15% TCP retransmission finding under load that every pre-existing counter failed to explain.