Firewall rule changes propagate across all replicas automatically

A firewall rule saved through one gateway replica now reaches every other replica, worker, and scheduler within seconds. The engine detects on-disk rule changes with a throttled check, so multi-replica deployments no longer need a restart to pick up an edit. A broken edit keeps the last-known-good rule set in force (fail-closed), so a malformed change never opens a gap.

No action required.