v2.5.3

Promote 2.5.3-beta 2 → 2.5.3 final. versionCode 76 → 77.

Rename workflow to version-agnostic "APK Build"

Hide domain and resolvers in CLI interactive mode for locked configs

Update vaydns-mobile submodule to latest

Includes setters for IdleTimeout, KeepAlive, UDPTimeout, and
MaxNumLabels that VaydnsBridge.kt depends on. Fixes CI build failure
caused by unresolved references to these methods.

Fix IPv6 resolver parsing corruption, block IPv6 input

Fix naive split(":") that corrupted IPv6 addresses like [fe80::]:53
into [fe80:53. Use bracket-aware parseHostPort() and formatResolver()
for correct round-tripping. Block IPv6 at validation since the tunnel
stack doesn't support it.

Update dnstt submodule: DoH send error backoff

v2.4.1: Revert NoizDNS Chrome changes, fix tunnel stability

NoizDNS:
- Revert Chrome page-load burst cover traffic to simple 1-query-per-5-15s
- Revert tunnel query EDNS0 from 1452 to 4096 and remove AD=1 flag
- Remove EDNS0 query padding and stealth MTU override
- Force-deadline KCP conn in Stop() for fast port release

Android:
- Add 5s grace period to ignore spurious network changes after connection
- Remove stealth mode query size override from UI
- Update Snowflake to v2.12.1

CLI:
- Remove --query-padding flag

Submodules:
- noizdns: reverted to stable pre-Chrome state
- dnstt-mobile: fast KCP shutdown
- dnstt: suppress closed-conn errors during shutdown

Fix Windows build: use Git Bash instead of WSL bash for picoquic build

WSL bash fails with "no installed distributions" on GitHub Actions
Windows runners. Use Git Bash (C:\Program Files\Git\bin\bash.exe)
which is always available.

Update noizdns submodule