feat: add wireguard relay integration for public server access with End-to-End Encryption

Integrates tunwg (WireGuard tunnel) to enable optional public access
to the hapi server. Tunnel is disabled by default and enabled via
--relay flag or HAPI_TUNNEL=true environment variable.

Users can now run 'hapi server --relay' and get a direct link like:
https://app.hapi.run/?server=https://xxx.relay.hapi.run&token=xxx

cli/src/types/assetImports.d.ts

@@ -12,3 +12,33 @@ declare module '*-LICENSE' {
     const path: string;
     export default path;
 }
+
+declare module '*/tunwg/LICENSE' {
+    const path: string;
+    export default path;
+}
+
+declare module '*/tunwg/tunwg-arm64-darwin' {
+    const path: string;
+    export default path;
+}
+
+declare module '*/tunwg/tunwg-x64-darwin' {
+    const path: string;
+    export default path;
+}
+
+declare module '*/tunwg/tunwg-arm64-linux' {
+    const path: string;
+    export default path;
+}
+
+declare module '*/tunwg/tunwg-x64-linux' {
+    const path: string;
+    export default path;
+}
+
+declare module '*/tunwg/tunwg-x64-win32.exe' {
+    const path: string;
+    export default path;
+}