Phase 6a-6d: Consolidate and clean up

6a: Delete dead standalone tollgate_core/ (12 files, never compiled)
6b: Rewrite dns_server.c as thin shim to component's tollgate_core_dns
    - Fix component DNS to bind to AP IP instead of INADDR_ANY
6c: Rewrite stratum_proxy.c as thin shim with struct cast to component types
6d: Move sandbox logic into component's tollgate_core_firewall
    - Add tollgate_core_fw_set_sandbox_ports/set_sandbox_mint_access
    - Add is_sandbox_allowed() to component's ip4_canforward_filter
    - Clean main/firewall.c to delegate filter to component
    - Remove redundant DNS auth double-calls from main firewall
Add ROADMAP.md with full extraction plan and checklists

All 21 unit tests pass. ESP-IDF build passes.

1 files changed, 0 insertions, 21 deletions

diff --git a/tollgate_core/src/tollgate_firewall.h b/tollgate_core/src/tollgate_firewall.h
deleted file mode 100644
index 7df8a45..0000000
--- a/tollgate_core/src/tollgate_firewall.h
+++ /dev/null
@@ -1,21 +0,0 @@
-#ifndef TOLLGATE_CORE_FIREWALL_H
-#define TOLLGATE_CORE_FIREWALL_H
-
-#include <stdint.h>
-#include <stdbool.h>
-
-#define TG_FW_MAX_MAC_LEN 18
-
-int tg_firewall_init(uint32_t ap_ip);
-void tg_firewall_grant(uint32_t client_ip);
-void tg_firewall_revoke(uint32_t client_ip);
-int tg_firewall_revoke_all(void);
-bool tg_firewall_is_allowed(uint32_t client_ip);
-bool tg_firewall_is_mac_allowed(const char *mac);
-int tg_firewall_client_count(void);
-int tg_firewall_get_mac_for_ip(uint32_t client_ip, char *mac_out, int mac_out_size);
-void tg_firewall_set_mining_port(uint16_t port);
-void tg_firewall_set_sandbox_mint_access(bool enable);
-int tg_firewall_filter_packet(const uint8_t *payload, int payload_len);
-
-#endif