fix(mdns): retain origin and bound daemon state

Vendor the pinned mdns-sd 0.21.1 source so response records retain their observed source IP. Bound unauthenticated cache records to 1024 globally and 128 per source, deduplicate and cap timers at 4096, and poll at least once per second for expiry cleanup.

Expose packet provenance through lanspread-mdns, drop originless resolutions, and add a dedicated vendor test recipe while keeping third-party sources outside workspace formatting and Clippy.

Test Plan:
- just mdns-vendor-test (106 tests passed with socket access)
- just test
- just fmt
- just clippy
- cache/per-source, exact-refresh, timer-cap, and serde tests
- git diff --check

Cargo.toml

@@ -10,6 +10,7 @@ members = [
   "crates/lanspread-tauri-deno-ts/src-tauri",
   "crates/lanspread-utils",
 ]
+exclude = ["vendor/mdns-sd"]
 
 [workspace.dependencies]
 base64 = "0.23"
@@ -23,20 +24,12 @@ futures = "0.3"
 gethostname = "1"
 if-addrs = "0.15"
 log = "0.4"
-mdns-sd = "0.21"
+mdns-sd = { path = "vendor/mdns-sd" }
 mimalloc = { version = "0.1", features = ["secure"] }
 rayon = "1"
-rcgen = {
-  version = "=0.14.10",
-  default-features = false,
-  features = ["aws_lc_rs"]
-}
+rcgen = { version = "=0.14.10", default-features = false, features = ["aws_lc_rs"] }
 rustix = "1"
-rustls = {
-  version = "=0.23.43",
-  default-features = false,
-  features = ["aws-lc-rs", "logging", "std"]
-}
+rustls = { version = "=0.23.43", default-features = false, features = ["aws-lc-rs", "logging", "std"] }
 s2n-quic = {
   version = "=1.88.0",
   default-features = false,