Show routes, TLS certs, and port-forwarding on services page

- Add Routes model to services UI (paths, headers, IP whitelisting per route)
- Show TLS cert info per service with inline provision/renew actions
- Remove TLS Certificates section from dashboard (now on services page)
- Make gateway router port list dynamic from config + VPN state
- Add TODO for header validation in HAProxy config generation

web/src/services/api/networking.ts

@@ -2,6 +2,22 @@ import { apiClient } from './client';
 
 // Services
 
+export interface HeaderConfig {
+  request?: Record<string, string>;
+  response?: Record<string, string>;
+}
+
+export interface Route {
+  paths?: string[];
+  backend: {
+    address: string;
+    type: string;
+    health?: string;
+  };
+  headers?: HeaderConfig;
+  ipAllow?: string[];
+}
+
 export interface RegisteredService {
   domain: string;
   source: string;
@@ -13,6 +29,7 @@ export interface RegisteredService {
   };
   public: boolean;
   tls?: string;
+  routes?: Route[];
 }
 
 export const servicesApi = {