checkpoint: implement wgcloak v1 foundations

Cargo.toml

@@ -0,0 +1,37 @@
+[package]
+name = "wgcloak"
+version = "0.1.0"
+edition = "2021"
+description = "Protocol-agnostic authenticated UDP transport layer"
+license = "MIT OR Apache-2.0"
+
+[dependencies]
+anyhow = "1.0"
+bytes = "1.7"
+base64 = "0.22"
+clap = { version = "4.5", features = ["derive"] }
+h3 = "0.0.8"
+h3-quinn = { version = "0.0.10", features = ["datagram"] }
+hkdf = "0.12"
+hmac = "0.12"
+hex = "0.4"
+quinn = "0.11"
+rand = "0.8"
+rustls = "0.23"
+secrecy = "0.8"
+serde = { version = "1.0", features = ["derive"] }
+sha2 = "0.10"
+socket2 = "0.5"
+subtle = "2.6"
+thiserror = "1.0"
+tokio = { version = "1.40", features = ["full"] }
+tokio-util = { version = "0.7", features = ["codec", "rt"] }
+tokio-rustls = "0.26"
+rustls-native-certs = "0.8"
+toml = "0.8"
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt"] }
+zeroize = "1.8"
+
+[dev-dependencies]
+tempfile = "3.13"