fix: ECC cert support, ACME deploy hook path, NAT detection, and account config fallback

- Add find_cert_dir() to resolve both RSA and ECC (domain_ecc/) cert dirs
- Copy acme deploy hook to /deploy/ where acme.sh resolves it
- _parse_account_conf checks both legacy .account.conf and declarative config
- Skip public DNS check when all local IPs are private (NAT)
- Improve check message strings for validity and expiry status
- Support timezone-aware date formats in _days_until parsing
- Filter out "no" SAN domains in cert listing
- Bump frontend asset version cache keys
- Fix DOMContentLoaded race condition in app.js boot
- Fix spread operator in certs.js modal template

tests/test_handler_acme.py

@@ -348,10 +348,10 @@ class TestCheckDnsPublic:
         from unittest.mock import patch
 
         mock_result = MagicMock(
-            returncode=0, stdout="example.com has address 192.168.1.1"
+            returncode=0, stdout="example.com has address 52.14.150.110"
         )
         with (
-            patch("socket.gethostbyname", return_value="192.168.1.1"),
+            patch("daemon.handlers.acme._get_local_ips", return_value={"52.14.150.110"}),
             patch("subprocess.run", return_value=mock_result),
         ):
             passed, _ = _check_dns_public("example.com")
@@ -362,12 +362,23 @@ class TestCheckDnsPublic:
 
         mock_result = MagicMock(returncode=1, stdout="NXDOMAIN")
         with (
-            patch("socket.gethostbyname", return_value="192.168.1.1"),
+            patch("daemon.handlers.acme._get_local_ips", return_value={"8.8.8.8"}),
             patch("subprocess.run", return_value=mock_result),
         ):
             passed, _ = _check_dns_public("example.com")
             assert passed is False
 
+    def test_nat_detected_skips_check(self):
+        from unittest.mock import patch
+
+        with patch(
+            "daemon.handlers.acme._get_local_ips",
+            return_value={"192.168.1.1"},
+        ):
+            passed, msg = _check_dns_public("example.com")
+            assert passed is True
+            assert "NAT" in msg
+
 
 class TestCheckDomainFormat:
     def test_valid(self):