feat(core): home router NAT after Java, measured with Java FILIUS

The core translates before the IP thread, as Java's NAT threads sit
between card and Ethernet: out, the WAN address and the entry's port (ICMP
keeps its identifier); in, by remote end, port and protocol, else by the
port forwarding, which then makes a dynamic entry; a ping at the WAN
address is answered by the router, packets from outside for the LAN are
dropped, both sides pass the router's firewall, TTL 1 going out gets time
exceeded. Dynamic entries expire at Java's check each second, 300 s times
the delay factor old (55 minutes at 90 %), refreshed only by what comes in.
The home router forwards as a router does.

Measured and not taken: when a LAN endpoint sends to a second remote end,
Java gives it the entry's WAN port but no entry, and the answer stays at
the router; the core adds an entry for each new remote end on that port.

The oracle now records every card of a node (the second card of routers
was missing); the ARP and RIP runs are recorded anew and still match.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

packages/core/test/scenarios/nat-java-pingWan.java.json

@@ -3,7 +3,7 @@
     "00000000-0000-0000-0000-000000000501": [],
     "00000000-0000-0000-0000-000000000502": [
       {
-        "time": 849,
+        "time": 851,
         "source": "02:00:00:00:05:41",
         "destination": "FF:FF:FF:FF:FF:FF",
         "arp": 1,
@@ -11,7 +11,7 @@
         "targetIp": "42.0.0.10"
       },
       {
-        "time": 851,
+        "time": 853,
         "source": "02:00:00:00:05:21",
         "destination": "02:00:00:00:05:41",
         "arp": 2,
@@ -19,7 +19,7 @@
         "targetIp": "42.0.0.20"
       },
       {
-        "time": 1089,
+        "time": 1083,
         "source": "02:00:00:00:05:41",
         "destination": "02:00:00:00:05:21",
         "icmp": 8,
@@ -29,7 +29,7 @@
         "sequence": 1
       },
       {
-        "time": 1089,
+        "time": 1083,
         "source": "02:00:00:00:05:21",
         "destination": "02:00:00:00:05:41",
         "icmp": 0,
@@ -39,7 +39,7 @@
         "sequence": 1
       },
       {
-        "time": 1315,
+        "time": 1308,
         "source": "02:00:00:00:05:41",
         "destination": "02:00:00:00:05:21",
         "icmp": 8,
@@ -49,9 +49,10 @@
         "sequence": 2
       }
     ],
+    "00000000-0000-0000-0000-000000000502#1": [],
     "00000000-0000-0000-0000-000000000504": [
       {
-        "time": 727,
+        "time": 729,
         "source": "02:00:00:00:05:41",
         "destination": "FF:FF:FF:FF:FF:FF",
         "arp": 1,
@@ -67,7 +68,7 @@
         "targetIp": "42.0.0.20"
       },
       {
-        "time": 970,
+        "time": 969,
         "source": "02:00:00:00:05:41",
         "destination": "02:00:00:00:05:21",
         "icmp": 8,
@@ -77,7 +78,7 @@
         "sequence": 1
       },
       {
-        "time": 1201,
+        "time": 1194,
         "source": "02:00:00:00:05:21",
         "destination": "02:00:00:00:05:41",
         "icmp": 0,
@@ -87,7 +88,7 @@
         "sequence": 1
       },
       {
-        "time": 1204,
+        "time": 1196,
         "source": "02:00:00:00:05:41",
         "destination": "02:00:00:00:05:21",
         "icmp": 8,
@@ -99,7 +100,7 @@
     ],
     "00000000-0000-0000-0000-000000000505": [
       {
-        "time": 849,
+        "time": 851,
         "source": "02:00:00:00:05:41",
         "destination": "FF:FF:FF:FF:FF:FF",
         "arp": 1,
@@ -110,19 +111,19 @@
   },
   "events": [
     [
-      720,
+      725,
       "sendProbe 42.0.0.10 called"
     ],
     [
-      1203,
+      1196,
       "sendProbe 42.0.0.10 returned ICMP 0/0 from 42.0.0.10"
     ],
     [
-      1204,
+      1196,
       "sendProbe 192.168.0.10 called"
     ],
     [
-      3954,
+      3946,
       "sendProbe 192.168.0.10 returned null"
     ]
   ],