apfree-wifidog: update to 9.09.2938

apfree-wifidog: update to 9.09.2938

Highlights of this release:

- eBPF captive DNS fast-answer: LAN DNS queries for captive detection
  domains are answered at wire speed from a pinned BPF map (default
  1.1.1.1) while the query still reaches dnsmasq, so captive portal
  detection works when the router is offline
- Real IPs are learned back into the map from snooped upstream DNS
  responses; the dnsmasq aw-captive-domains-hosts mechanism and its
  restart dance are removed (one-time migration at startup)
- Always start HTTP/HTTPS service threads (fix dangling gencb arg);
  sync trusted MACs into eBPF mac_map; portal DNS consumer
  auto-reconnects when aw-bpf reloads

Maintainer: me
Compile tested: aarch64_cortex-a53 (chawrt 25.12 / OpenWrt snapshot)

Signed-off-by: Dengfeng Liu <redacted>