Add iPad support, auto-pinning, and comprehensive logging

- Adaptive iPhone/iPad layout with NavigationSplitView sidebar
- Auto-detect SSL-pinned domains, fall back to passthrough
- Certificate install via local HTTP server (Safari profile flow)
- App Group-backed CA, per-domain leaf cert LRU cache
- DB-backed config repository, Darwin notification throttling
- Rules engine, breakpoint rules, pinned domain tracking
- os.Logger instrumentation across tunnel/proxy/mitm/capture/cert/rules/db/ipc/ui
- Fix dyld framework embed, race conditions, thread safety

ProxyCore/Sources/ProxyEngine/GlueHandler.swift

@@ -2,7 +2,6 @@ import Foundation
 import NIOCore
 
 /// Bidirectional TCP forwarder. Pairs two channels so bytes flow in both directions.
-/// Used for CONNECT tunneling (passthrough mode, no MITM).
 final class GlueHandler: ChannelInboundHandler, RemovableChannelHandler {
     typealias InboundIn = ByteBuffer
     typealias OutboundOut = ByteBuffer
@@ -13,15 +12,19 @@ final class GlueHandler: ChannelInboundHandler, RemovableChannelHandler {
 
     func handlerAdded(context: ChannelHandlerContext) {
         self.context = context
+        ProxyLogger.glue.debug("GlueHandler added to \(context.channel.localAddress?.description ?? "?")")
     }
 
     func handlerRemoved(context: ChannelHandlerContext) {
+        ProxyLogger.glue.debug("GlueHandler removed from \(context.channel.localAddress?.description ?? "?")")
         self.context = nil
         self.partner = nil
     }
 
     func channelRead(context: ChannelHandlerContext, data: NIOAny) {
-        partner?.write(unwrapInboundIn(data))
+        let buf = unwrapInboundIn(data)
+        ProxyLogger.glue.debug("GlueHandler read \(buf.readableBytes) bytes, forwarding to partner")
+        partner?.write(buf)
     }
 
     func channelReadComplete(context: ChannelHandlerContext) {
@@ -29,10 +32,12 @@ final class GlueHandler: ChannelInboundHandler, RemovableChannelHandler {
     }
 
     func channelInactive(context: ChannelHandlerContext) {
+        ProxyLogger.glue.debug("GlueHandler channelInactive — closing partner")
         partner?.close()
     }
 
     func errorCaught(context: ChannelHandlerContext, error: Error) {
+        ProxyLogger.glue.error("GlueHandler error: \(error.localizedDescription)")
         context.close(promise: nil)
     }
 
@@ -42,8 +47,6 @@ final class GlueHandler: ChannelInboundHandler, RemovableChannelHandler {
         }
     }
 
-    // MARK: - Partner operations
-
     private func write(_ buffer: ByteBuffer) {
         context?.write(wrapOutboundOut(buffer), promise: nil)
     }