Fix policy override, Bootstrap deadlock, duplicate history samples

- registry.Client.SetNetworkPolicy: build message from copy of policy map so
  caller keys cannot override type/network_id/admin_token fields
- daemon.ManagedEngine.Bootstrap: release me.mu before calling persist (which
  takes RLock on same mutex) to avoid deadlock
- registry.Server.recordSample: bucket samples by hour/day timestamp so
  restarts within the same bucket overwrite rather than duplicate entries

Author: teovl

pkg/daemon/managed.go

@@ -116,8 +116,6 @@ func (me *ManagedEngine) Bootstrap() error {
 	}
 
 	me.mu.Lock()
-	defer me.mu.Unlock()
-
 	now := time.Now()
 	for _, id := range candidates[:limit] {
 		if _, exists := me.peers[id]; !exists {
@@ -127,9 +125,11 @@ func (me *ManagedEngine) Bootstrap() error {
 			}
 		}
 	}
+	peerCount := len(me.peers)
+	me.mu.Unlock()
 
 	me.persist()
-	slog.Info("managed: bootstrapped", "network_id", me.netID, "peers", len(me.peers), "available", len(candidates))
+	slog.Info("managed: bootstrapped", "network_id", me.netID, "peers", peerCount, "available", len(candidates))
 	return nil
 }
 

pkg/registry/client.go

@@ -700,13 +700,12 @@ func (c *Client) GetMemberRole(networkID uint16, targetNodeID uint32) (map[strin
 
 // SetNetworkPolicy sets or updates a network's policy. Requires owner/admin role or admin token.
 func (c *Client) SetNetworkPolicy(networkID uint16, policy map[string]interface{}, adminToken string) (map[string]interface{}, error) {
-	msg := map[string]interface{}{
-		"type":       "set_network_policy",
-		"network_id": networkID,
-	}
+	msg := map[string]interface{}{}
 	for k, v := range policy {
 		msg[k] = v
 	}
+	msg["type"] = "set_network_policy"
+	msg["network_id"] = networkID
 	if adminToken != "" {
 		msg["admin_token"] = adminToken
 	}