Unique SSID/IP per board + captive detection fix + mint list in portal

- Derive unique SSID (TollGate-{MAC4}{MAC5}) and AP IP (10.{b5}.{subnet}.1)
  from factory MAC — boards no longer conflict
- Board A: TollGate-377C @ 10.55.85.1, Board B: TollGate-5050 @ 10.80.10.1
- Captive portal detection URIs return 200 with portal HTML (matching
  esp32-mesh working approach) instead of 302 redirect
- Dynamic AP IP in portal HTML via __AP_IP__ template substitution
- Supported mints section in portal page (shows mint URL, tap to copy)
- Fixed mint URL to testnut.cashu.space (was stale in SPIFFS)
- DoT reject server on port 853 for DNS-over-TLS fallback
- DNS hijack: NXDOMAIN for all non-A queries, no forwarding for unauthed
- Playwright tests updated for 200 response on detection URIs
- Phase 2 test suite: 20/21 pass (test 22 expiry ping route issue)
- Tests 25-27 deferred to Phase 3 (Board B as second client)

1 files changed, 1 insertions, 1 deletions

diff --git a/main/captive_portal.h b/main/captive_portal.h
index 30d8c3e..06eb860 100644
--- a/main/captive_portal.h
+++ b/main/captive_portal.h
@@ -4,7 +4,7 @@
 #include "esp_http_server.h"
 #include "esp_err.h"
 
-esp_err_t captive_portal_start(void);
+esp_err_t captive_portal_start(const char *ap_ip_str);
 void captive_portal_stop(void);
 httpd_handle_t captive_portal_get_server(void);