fix(routing): polish CIDR/regex/port-range matchers and document capset stance#24

andypost wants to merge 1 commit into

masterandypost/unit:masterfrom

claude/audit-pr-i-routing-polishandypost/unit:claude/audit-pr-i-routing-polishCopy head branch name to clipboard