IPsec remote access now shows whether the site is connected

Remote access over IPsec (IKEv2), for site routers that speak nothing else, now shows whether the remote site is connected, with its availability and traffic, instead of an unknown state. A site set up but never connected stays in the list, and "Add peer" attaches a second router.

• A plant can have only one IPsec connection, and adding a second is refused with a notice.
• The "Debug" tab can now ping an address across an IPsec tunnel and show its route.
• An outgoing IPsec connection that is down is no longer shown as a WireGuard one.
• "Live status" no longer flashes a routing error while the remote site is not connected.

Release notes