Add adaptive hostile-network recovery and organization-owned upgrades

[TaJirax]

What changed

• Adds per-resolver adaptive transport scoring and recovery for hostile or poisoned DNS environments.
• Adds poison-triggered alternate-path racing, seamless in-flight replay, warm-path probing, adaptive MTU pooling, and Super-FEC support.
• Keeps Linux and Docker one-line installs, upgrades, release links, container images, issue links, and runtime repository links under WhiteDNS/CottenDns.

Why

The Android application sources its native CottenDNS engine from WhiteDNS/CottenDns. The engine improvements therefore need to live in the organization repository, while organization deployments must not redirect users to the personal fork.

Validation

• Full go test ./... passed.
• Linux and Docker installer shell syntax passed.
• Legacy one-command upgrade contract passed.
• The prior full 20-platform debug matrix passed for the hostile-network engine commit.