Optimize firewall state collection and improve daemon shutdown

- Replace per-zone --list-all calls with single --list-all-zones in _collect_firewall
- Add _parse_all_zones_output() parser with rich rules/rich-rules normalization
- Convert daemon shutdown to async with proper runner cleanup and socket unlink
- Add TimeoutStopSec=15 to vacuum-walld.service for graceful stop
- Fix exception handling in _collect_dnsmasq
- Remove management badge from proxy path rows

webui/static/pages/proxy.js

@@ -203,9 +203,7 @@ function pathRow(d, certs, domainPaths, state) {
     const multiPath = (domainPaths || []).length > 1;
 
     let actions;
-    if (isMgmt) {
-        actions = Badge({ text: 'mgmt', variant: 'warning' });
-    } else if (isWs) {
+    if (isWs) {
         actions = ActionButton({
             url: '/api/proxy/domains/' + enc(d.domain),
             method: 'PUT',