feat(cli): select transport in config; server MultiServer + client dial handover

- aura-cli config gains [transport] (order + per-transport ports + obfuscate/
  masquerade); server binds all enabled transports via MultiServer, client uses
  dial() with UDP->TCP->QUIC handover. Config examples updated; backward-compatible
  (defaults to udp,tcp,quic). 21 cli tests incl. a real-UDP-transport loopback.
- docs/sing-box.md: integration approach note (process-bridge now; native Go
  outbound for phones, with crypto-library mapping + KAT requirement).
- Normalize rustfmt across the v2 transport files (tcp/dial/udp contract).

Whole workspace: 97 tests pass, clippy -D warnings clean, fmt clean. Deploy flow
(pki init/issue-server/issue-client) validated with the release binary.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

crates/aura-transport/src/dial.rs

@@ -34,7 +34,9 @@ impl FromStr for TransportMode {
             "udp" => Ok(Self::Udp),
             "tcp" => Ok(Self::Tcp),
             "quic" => Ok(Self::Quic),
-            other => Err(format!("unknown transport '{other}' (expected udp|tcp|quic)")),
+            other => Err(format!(
+                "unknown transport '{other}' (expected udp|tcp|quic)"
+            )),
         }
     }
 }
@@ -117,7 +119,8 @@ pub async fn dial(
         };
         tracing::info!("dial: trying {mode} at {addr}");
         let attempt =
-            tokio::time::timeout(cfg.attempt_timeout, dial_one(*mode, addr, &proto_cfg, &cfg)).await;
+            tokio::time::timeout(cfg.attempt_timeout, dial_one(*mode, addr, &proto_cfg, &cfg))
+                .await;
         match attempt {
             Ok(Ok(conn)) => {
                 tracing::info!("dial: connected via {mode}");