feat: Guest WiFi, network intelligence, firmware orchestration, platform automation, api-ssl (v0.16.3-beta)

Guest WiFi (Hotspot): one-click captive-portal wizard that creates the guest
SSID (virtual AP per radio), VLAN/bridge segregation + L3 VLAN interface, pool,
DHCP, portal, rate-limited guest profile, and masquerade; vouchers with limits +
printable sheets; live guest sessions; walled garden.

Network intelligence: per-client device fingerprinting (vendor/hostname →
category) with a persisted per-client override on the detail page; rogue/neighbor
AP detection from stored AP scans (evil-twin flagging); Mist-style anomaly
insights (client-count/CPU vs same-hour 14-day baseline + error bursts) in the
Operations engine.

Firmware orchestration: staged wave-based RouterOS rollouts (canary first) with
pre-upgrade backup, reboot-ride-out, version verification, halt-on-failure, and
scheduling; live per-device progress + cancel.

Platform & automation: scoped API tokens (mtm_, read/write, hashed at rest,
Bearer auth in requireAuth); outbound webhooks (12 events, HMAC-signed) fired
from the alert pipeline + firmware orchestrator; scheduled email reports.

api-ssl: RouterOSClient negotiates TLS on port 8729 and accepts RouterOS's
default self-signed certs (rejectUnauthorized:false), so SSL-secured API devices
connect without manual cert trust. Fixes #57.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

frontend/src/App.tsx

@@ -9,6 +9,7 @@ import ClientsPage from './pages/ClientsPage';
 import EventsPage from './pages/EventsPage';
 import TopologyPage from './pages/TopologyPage';
 import BackupsPage from './pages/BackupsPage';
+import FirmwarePage from './pages/FirmwarePage';
 import SettingsPage from './pages/SettingsPage';
 import SwitchesOverviewPage from './pages/SwitchesOverviewPage';
 import SwitchesSettingsPage from './pages/SwitchesSettingsPage';
@@ -17,6 +18,7 @@ import RouterSettingsPage from './pages/RouterSettingsPage';
 import WirelessPage from './pages/WirelessPage';
 import WirelessSettingsPage from './pages/WirelessSettingsPage';
 import WirelessClientsPage from './pages/WirelessClientsPage';
+import GuestWifiPage from './pages/GuestWifiPage';
 import ClientDetailPage from './pages/ClientDetailPage';
 import NetworkServicesOverviewPage from './pages/NetworkServicesOverviewPage';
 import NetworkServicesDHCPPage from './pages/NetworkServicesDHCPPage';
@@ -56,6 +58,7 @@ export default function App() {
           <Route path="events" element={<EventsPage />} />
           <Route path="topology" element={<TopologyPage />} />
           <Route path="backups" element={<BackupsPage />} />
+          <Route path="firmware" element={<FirmwarePage />} />
           <Route path="settings" element={<SettingsPage />} />
           <Route path="switches" element={<SwitchesOverviewPage />} />
           <Route path="switches/settings" element={<SwitchesSettingsPage />} />
@@ -64,6 +67,7 @@ export default function App() {
           <Route path="wireless" element={<WirelessPage />} />
           <Route path="wireless/settings" element={<WirelessSettingsPage />} />
           <Route path="wireless/clients" element={<WirelessClientsPage />} />
+          <Route path="wireless/guest" element={<GuestWifiPage />} />
           <Route path="network-services" element={<NetworkServicesOverviewPage />} />
           <Route path="network-services/dhcp" element={<NetworkServicesDHCPPage />} />
           <Route path="network-services/dns" element={<NetworkServicesDNSPage />} />