piggyback.c — no FWD_HOST, FWD_PORT, or SERVER_IP constants. Daemon auto-detects interface and its own IP from
getifaddrs. Forward target comes from the client packet always. Config is just IFACE, LISTEN_PORT, AUTH_ENABLED,
TRUSTED_PUBKEY.
pb-client.c — CLI flags as you wanted. Always sends the 80-byte header (action + target). Without --key: timestamp=0,
sig=zeros, daemon in no-auth mode reads action+target and skips verification. With --key: full signed header.
README.md — SNI note fixed: "must match middleware virtual host config" — it's whatever the middleware requires, the
operator looks it up. Removed all the wrong advice about changing it.
