feat: relay peer end-to-end encryption via Noise IK handshake (#1960)

Enable encryption for non-direct nodes requiring relay forwarding.
When secure_mode is enabled, peers perform Noise IK handshake to
establish an encrypted PeerSession. Relay packets are encrypted at
the sender and decrypted at the receiver. Intermediate forwarding
nodes cannot read plaintext data.

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: KKRainbow <5665404+KKRainbow@users.noreply.github.com>

easytier/src/common/network.rs

@@ -18,7 +18,8 @@ struct InterfaceFilter {
 
 #[cfg(any(
     target_os = "android",
-    any(target_os = "ios", feature = "macos-ne"),
+    target_os = "ios",
+    all(target_os = "macos", feature = "macos-ne"),
     target_env = "ohos"
 ))]
 impl InterfaceFilter {