Complete Phase 12 dual-stack networking

Add IPv6-aware Wi-Fi state, HTTPS/SSH listeners, mDNS service
reconciliation, and browser Wi-Fi administration.

Include a guarded build-local fix for mDNS 1.12.0 membership handling,
focused regression suites, and Phase 12 acceptance documentation.

tests/web_auth_parse/README.md

@@ -14,7 +14,7 @@ parser substitutes, network access, or persistent build artifacts are used.
 Compilation errors and test failures produce nonzero exit status.
 
 Tables cover DNS/IPv4 origin canonicalization, case folding and optional `:443`,
-malformed authorities/origins and unsupported IPv6; selected cookie presence,
+bracketed IPv6 canonicalization and malformed authorities/origins; selected cookie presence,
 uniqueness, exact lowercase 64-digit hex and surrounding cookie syntax; strict
 login JSON, both field orders, escapes, Unicode/surrogate pairs, invalid UTF-8,
 NUL, duplicate/unknown fields, truncation and byte limits (512-byte body,
@@ -31,7 +31,22 @@ bytes. Successful results check canonical/decoded bytes and termination.
 - This is a focused parser contract suite, not HTTP integration, authorization,
   CSRF/session, duplicate HTTP header-line, TLS, credential-policy, or hardware
   testing. Empty credentials are syntactically valid; database policy is separate.
-- IPv6 is intentionally rejected, not normalized or supported.
+- IPv6 tests check expanded/compressed/case/default-port equivalence, longest
+  zero runs and ties, dotted tails, mapped-address separation from IPv4,
+  DNS separation, mismatched addresses, zones, malformed groups/brackets/ports,
+  userinfo, suffixes, controls and exact-span output wiping.
+- Canonical IPv6 uses lowercase hex tails even for mapped addresses. No DNS
+  resolution, scope inference or network reachability is involved.
+- To additionally audit the installed ESP-IDF conversion implementation, run:
+  ```sh
+  WEB_AUTH_LWIP_SOURCE=/home/mscholz/.platformio/packages/framework-espidf/components/lwip/lwip/src/core/ipv6/ip6_addr.c python3 tests/web_auth_parse/run.py
+  ```
+  Adjust the path for your installation. This compiles the actual extracted
+  `ip6addr_aton` body with host type/byte-order adapters and the same temporary
+  address-copy boundary as `lwip_inet_pton`. IPv4-tail and scope branches are
+  disabled: production validates/replaces dotted tails before conversion and
+  rejects zones. The production formatter is exercised, not substituted.
+  This is not a target build or full lwIP networking test.
 - Python mirrors the public C struct and capacities; interface changes must
   update these tests. Shared-library loading assumes a Unix-like host/compiler.
 - Tables are not exhaustive fuzzing, memory-safety instrumentation, or proof of