fix: ECC cert support, ACME deploy hook path, NAT detection, and account config fallback

- Add find_cert_dir() to resolve both RSA and ECC (domain_ecc/) cert dirs
- Copy acme deploy hook to /deploy/ where acme.sh resolves it
- _parse_account_conf checks both legacy .account.conf and declarative config
- Skip public DNS check when all local IPs are private (NAT)
- Improve check message strings for validity and expiry status
- Support timezone-aware date formats in _days_until parsing
- Filter out "no" SAN domains in cert listing
- Bump frontend asset version cache keys
- Fix DOMContentLoaded race condition in app.js boot
- Fix spread operator in certs.js modal template

webui/static/pages/certs.js

@@ -172,7 +172,7 @@ function _renderIssueContent() {
                     <label>Domain</label>
                     <input id="ic-domain" value=${esc(s.domain)} />
                 </div>
-                <div id="ic-vresults">${...resultsVNodes}</div>
+                <div id="ic-vresults">${resultsVNodes}</div>
             </div>
             <div class="modal-actions">
                 <button class="btn btn-outline" data-action="ic-cancel">Cancel</button>