feat(M6): localOnly forward option (loopback→LAN rewrite for cluster, local direct), canvas diff-based create/revoke commands, revoke task semantics, topology derived canvas on sync nodes, LAN addr helper

web/src/types.ts

@@ -13,6 +13,8 @@ export interface Local {
   ip: string;
   port: number;
   protocol: string; // tcp | udp | http | https
+  // localOnly: forward stays on this node (loopback kept), no cluster.
+  localOnly?: boolean;
 
   // M1 advanced transport knobs (optional; empty/zero = frpc defaults)
   useEncryption?: boolean;