feat: SOCKS5 egress proxy + harden local-model path (#79)

Integrate SOCKS5 attack-traffic proxying, egress leak visibility, and local-model hardening. Preserve direct local/LAN model traffic while the proxy is active and reconcile the branch with current upstream.

package.json

@@ -122,8 +122,10 @@
     "gradient-string": "^2.0.2",
     "inquirer": "^9.2.15",
     "ora": "^8.0.1",
+    "socks": "^2.8.9",
     "tree-sitter-wasms": "0.1.13",
     "tsx": "^4.7.0",
+    "undici": "^8.7.0",
     "web-tree-sitter": "0.25.10"
   },
   "devDependencies": {