feat(e2e): add multi-IP endpoint architecture with dedicated traffic VM

Replace single-service-per-endpoint with all-ips mode running nginx, apache,
and hitch+varnish simultaneously on 3 dedicated IPs per VM (eth1 alias IPs).
Add a dedicated traffic VM with curl-impersonate for realistic TLS fingerprints,
parallelized traffic generation, and paired SNI_HOSTS/TARGET_IPS lists for
per-VM per-service hostname identification (e.g. rocky9-nginx-platform.test).

Key changes:
- run-tests-vm.sh: add setup_all_ips(), IP-specific Listen/bind directives
  with reset-before-apply pattern, graceful service availability checks
- run-e2e-test.sh: traffic VM architecture, all-ips mode, eth1 network,
  paired IP/SNI lists, updated cleanup for alias IPs
- generate-traffic.sh: parallel background jobs, curl-impersonate detection,
  auto source interface detection via ip route get, Host header in HTTP traffic
- Vagrantfile: add traffic VM with provision-traffic.sh
- provision-traffic.sh: install curl-impersonate and httpx for traffic gen
- test-rpm.sh: multi-interface TC check, updated ja4ebpf config
- clickhouse-init.sh: load CSV stubs for Anubis/bot-networks dictionaries
- Remove obsolete correlator/sentinel/mod-reqin-log docs
- Add h2_settings_ack column to http_logs schema
- Upgrade Go toolchain to 1.25.0

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tests/vm/Vagrantfile

@@ -93,6 +93,26 @@ Vagrant.configure("2") do |config|
     node.vm.post_up_message = "VM rocky10 prête ! Tests : make test-vm-rocky10"
   end
 
+  # ═══════════════════════════════════════════════════════════════════════════
+  # VM 5 : Traffic Generator (curl-impersonate + httpx)
+  #
+  # VM dédiée à la génération de trafic vers les endpoints.
+  # Séparée des VMs endpoint pour des TLS fingerprints réalistes
+  # et des IPs sources distinctes.
+  # ═══════════════════════════════════════════════════════════════════════════
+  config.vm.define "traffic", autostart: false do |node|
+    node.vm.box = "generic/rocky9"
+    node.vm.network "private_network",
+      libvirt__network_name: "ja4-e2e",
+      type: "dhcp"
+    node.vm.provider :libvirt do |v|
+      v.cpus   = 2
+      v.memory = 1024
+    end
+    node.vm.provision "shell", path: "provision-traffic.sh"
+    node.vm.post_up_message = "VM traffic prête ! Génération de trafic vers les endpoints."
+  end
+
   # ═══════════════════════════════════════════════════════════════════════════
   # VM 4 : Analysis Server (ClickHouse + bot-detector + dashboard)
   #