Add packaged Insta360 X4 integration and recover paired Node channels

Discover independent camera instances and prepare their versioned runtime
from Node or remote Core. Add isolated SDK workers, camera controls, raw
dual-fisheye WebRTC preview, and shared action/region loading states.

Recover existing Node bindings over known Tailscale addresses after a Core
LAN address change. Preserve identities and trust, pin both peers, migrate
endpoints with revision checks, and require real heartbeats for online status.
Fix the Python client certificate profile for Go X509 verification.

Pin Design Guideline 8c53f73 and retain installer/build/acceptance history.
Node 0.8.19 is installed; X4 0.1.3-3 is bundled but hardware activation is pending.

Validation: qualified DG/Node builds and Go race tests; 31 fleet tests;
Python-to-Go certificate interoperability and live tailnet recovery with five
fresh heartbeats; prior 38 X4 tests and bounded remote WebRTC acceptance.
Clean-OS, replug/power autonomy, local X4 video and long-run stability remain open.

apps/node-agent/internal/node/pairing.go

@@ -10,6 +10,7 @@ import (
 	"net/http"
 	"os"
 	"path/filepath"
+	"sort"
 	"sync"
 	"time"
 )
@@ -21,15 +22,16 @@ type Invitation struct {
 	SecretHash string `json:"secret_hash,omitempty"`
 }
 type CoreBinding struct {
-	BindingID string `json:"binding_id"`
-	CoreID    string `json:"core_id"`
-	CoreName  string `json:"core_name"`
-	Endpoint  string `json:"endpoint"`
-	CAPEM     string `json:"ca_pem"`
-	ClientPEM string `json:"client_pem"`
-	Receipt   string `json:"receipt,omitempty"`
-	OfferHash string `json:"offer_hash,omitempty"`
-	ExpiresAt int64  `json:"expires_at"`
+	EndpointRevision uint64 `json:"endpoint_revision,omitempty"`
+	BindingID        string `json:"binding_id"`
+	CoreID           string `json:"core_id"`
+	CoreName         string `json:"core_name"`
+	Endpoint         string `json:"endpoint"`
+	CAPEM            string `json:"ca_pem"`
+	ClientPEM        string `json:"client_pem"`
+	Receipt          string `json:"receipt,omitempty"`
+	OfferHash        string `json:"offer_hash,omitempty"`
+	ExpiresAt        int64  `json:"expires_at"`
 }
 type PairState struct {
 	Schema      string        `json:"schema"`
@@ -171,6 +173,12 @@ func (p *Pairing) addresses() []string {
 			}
 		}
 	}
+	sort.SliceStable(result, func(i, j int) bool {
+		if tailnetAddress(result[i]) != tailnetAddress(result[j]) {
+			return tailnetAddress(result[i])
+		}
+		return result[i] < result[j]
+	})
 	return result
 }
 func (p *Pairing) invite(address string) (map[string]any, error) {