Optimize firewall state collection and improve daemon shutdown

- Replace per-zone --list-all calls with single --list-all-zones in _collect_firewall
- Add _parse_all_zones_output() parser with rich rules/rich-rules normalization
- Convert daemon shutdown to async with proper runner cleanup and socket unlink
- Add TimeoutStopSec=15 to vacuum-walld.service for graceful stop
- Fix exception handling in _collect_dnsmasq
- Remove management badge from proxy path rows

lib/state.py

@@ -15,7 +15,7 @@ from typing import Any, ClassVar
 from lib.common import load_json, run, run_proc
 from lib.firewall import (
     _parse_active_zones,
-    _parse_zone_output,
+    _parse_all_zones_output,
 )
 from lib.firewall import (
     config_pending as _config_pending,
@@ -401,7 +401,6 @@ def _collect_firewall() -> dict[str, Any]:
         Dict containing firewall zones, interfaces, rules, config, and
         pending changes.
     """
-    zone_names = run(["firewall-cmd", "--get-zones"], sudo=True).split()
     active_raw = run(["firewall-cmd", "--get-active-zones"], sudo=True)
     active = _parse_active_zones(active_raw)
     services = run(["firewall-cmd", "--get-services"], sudo=True).split() or []
@@ -458,14 +457,13 @@ def _collect_firewall() -> dict[str, Any]:
 
     ifaces = list(iface_map.values())
 
+    # Collect all zones in a single call (replaces per-zone loop)
     zones: dict[str, dict[str, Any]] = {}
-    for zn in zone_names:
-        try:
-            zones[zn] = _parse_zone_output(
-                zn, run(["firewall-cmd", f"--zone={zn}", "--list-all"], sudo=True)
-            )
-        except Exception:
-            continue
+    try:
+        all_zones_raw = run(["firewall-cmd", "--list-all-zones"], sudo=True)
+        zones = _parse_all_zones_output(all_zones_raw)
+    except Exception:
+        pass
 
     # Load config
     fw_config_path = PROJECT_DIR / "config" / "firewall" / "config.json"
@@ -584,7 +582,7 @@ def _collect_dnsmasq() -> dict[str, Any]:
                     "interface": parts[4] if len(parts) > 4 else "",
                 }
             )
-    except RuntimeError:
+    except Exception:
         pass
 
     # Check config file on disk