v0.3: 6-layer architecture complete

Layers:
  Layer 1: XDP/eBPF — TCP state machine, SYN throttle, blacklist, ringbuf
  Layer 2: PoW Challenge — SHA-256 hashcash, dynamic difficulty, constant-time verify
  Layer 3: Rust Core — HMAC handshake, rate limit, death code (existing)
  Layer 4: Velocity — Physics check, CAPTCHA, protocol verification
  Layer 5: Paper — Heartbeat, auto-registration (existing)
  Layer 6: Traffic Intel — EWMA, 168h profiling, reputation, alerts

Infra: XDP→Prometheus metrics, ClickHouse + Grafana dashboard, Docker Compose
Testing: 100-IP DDoS simulation, MHDDoS ref analysis, load test report
Fixes: VarInt sign extension UB, pure ACK deadlock, RST/FIN cleanup
Ref: MHDDoS, Sonar, LimboFilter, AtomGuard, Infrarust, MC-XDP-eBPF, PowGo

deploy/test/config.test.toml

@@ -0,0 +1,45 @@
+[bind]
+address = "0.0.0.0"
+port = 25565
+
+[backend]
+address = "backend"
+port = 25565
+
+[hmac]
+secret = "test-secret-for-local-dev-only"
+
+[worker]
+count = 4
+
+[limits]
+rate_limit_login_pps = 50
+rate_limit_burst = 100
+
+[store]
+redis_url = ""
+clickhouse_url = "http://clickhouse:8123"
+
+[xdp]
+enabled = false
+interface = "eth0"
+
+[death_code]
+enabled = true
+
+[minecraft]
+ping_timeout_ms = 5000
+handshake_timeout_ms = 10000
+
+[metrics]
+enabled = true
+port = 9090
+
+[logging]
+level = "debug"
+
+[pow]
+enabled = true
+difficulty = 4
+
+whitelist = ["localhost", "127.0.0.1"]