IPv6 endpoint validation inconsistency between validation.rs and wireguard_builder.rs

[cachebag]

ipv6 endpoint parsing is handled differently in two places:

• wireguard_builder.rs:420-431 correctly handles [IPv6]:port using rsplitn
• validation.rs:269-276 (validate_wireguard_peer) uses split(':').next_back() which will misparse ipv6 addresses since they contain colons

related: validate_cidr and validate_ip_address in validation.rs use heuristic string splitting on . / : rather than std::net::IpAddr::parse(). malformed-but-plausible addresses can slip through.

[cachebag]

The main bug here is actually fixed, though, a couple things to note here:

• validate_ip_address and validate_cidr still hand-roll IPv4 as split('.') + parse::<u16>(), so 01.02.03.04 and +1.2.3.4 pass where Ipv4Addr::parse rejects them — while wireguard_builder.rs uses real parsing.
• validate_wireguard_gateway and validate_gateway are basically the same exact thing.