Apply client changes to the running tunnel without a restart

Saving a client or rule restarted the whole host tunnel (wg-quick down/up)
and re-ran the firewall manager setup, which was slow and briefly dropped
every client on the host.

Client and rule changes now sync peers with `wg syncconf` and re-run the
PostUp script, skipping the firewalld/ufw step. Host creation and edits
still do a full restart.

PostUp now loads the per-host chains with `iptables-restore --noflush`, so
re-running it on a live tunnel swaps the rules atomically instead of
leaving the chains empty between flush and re-add.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/pages/api/admin/crud/(tables)/clients/del.ts

@@ -116,6 +116,7 @@ export default async function (
                 host,
                 user,
                 is_update_after_client_setup: true,
+                apply_live: true,
             });
 
             if (!host_setup_res.success) {