Add: dns leak detection

docs/WORK_ITEMS_v0.4.0.md

@@ -0,0 +1,33 @@
+# WTFnet v0.4.0 - Work Items
+
+This is a practical checklist to execute v0.4.0.
+
+## 1) platform flow ownership
+- [x] add FlowOwnerProvider trait + data types
+- [x] implement Linux best-effort lookup
+- [x] implement Windows best-effort lookup
+
+## 2) new wtfnet-dnsleak crate
+- [x] crate scaffold + pcap feature
+- [x] UDP/TCP 53 capture + classify
+- [x] DoT detection (TCP 853)
+- [x] policy model + profiles
+- [x] leak rules A/B/C (partial)
+- [x] privacy modes
+- [x] report + summary builder
+
+## 3) CLI wiring
+- [x] add `dns leak status`
+- [x] add `dns leak watch`
+- [x] add `dns leak report`
+
+## 4) docs updates
+- [x] add `docs/RELEASE_v0.4.0.md`
+- [x] add `docs/DNS_LEAK_DETECTOR_IMPLEMENTATION.md`
+- [x] update README roadmap + flags
+- [x] update COMMANDS.md
+- [x] update status/implementation docs
+
+## 5) follow-ups
+- [ ] add DoH heuristic classification (optional)
+- [ ] add Leak-D mismatch correlation (optional)