Support target-free SOCKS5 port mappings with reference protection and UI workflows.
Include connection-stage diagnostics, SSH fingerprint confirmation, asset impact checks, listener traffic visibility, SQLite snapshots, account mapping improvements, and MySQL discovery fixes.
Update feature rationale and validation docs; Go checks, frontend build and 121 browser tests passed.