Add per-device L2/misc long-tail: tunnels/stopped_rules/proxy_arp/proxy_ndp/arp_rules/maclist

Storage + CRUD (migration 0007, model, id-keyed store, REST handlers) + compiler
rendering, each owned by a device. proxy_arp/proxy_ndp share the ProxyEntry
shape via table-parameterized store helpers.

internal/compiler/compiler.go

@@ -39,6 +39,12 @@ type Input struct {
 	Providers    []model.Provider
 	Routes       []model.Route
 	RoutingRules []model.RoutingRule
+	Tunnels      []model.Tunnel
+	StoppedRules []model.StoppedRule
+	ProxyARP     []model.ProxyEntry
+	ProxyNDP     []model.ProxyEntry
+	ArpRules     []model.ArpRule
+	Maclist      []model.MaclistEntry
 }
 
 // RenderedConfig is the per-device output served to the agent.
@@ -60,6 +66,12 @@ type RenderedConfig struct {
 	Providers    []RenderedProvider    `yaml:"providers,omitempty" json:"providers,omitempty"`
 	Routes       []RenderedRoute       `yaml:"routes,omitempty" json:"routes,omitempty"`
 	RoutingRules []RenderedRoutingRule `yaml:"routing_rules,omitempty" json:"routing_rules,omitempty"`
+	Tunnels      []RenderedTunnel      `yaml:"tunnels,omitempty" json:"tunnels,omitempty"`
+	StoppedRules []RenderedStoppedRule `yaml:"stopped_rules,omitempty" json:"stopped_rules,omitempty"`
+	ProxyARP     []RenderedProxy       `yaml:"proxy_arp,omitempty" json:"proxy_arp,omitempty"`
+	ProxyNDP     []RenderedProxy       `yaml:"proxy_ndp,omitempty" json:"proxy_ndp,omitempty"`
+	ArpRules     []RenderedArpRule     `yaml:"arp_rules,omitempty" json:"arp_rules,omitempty"`
+	Maclist      []RenderedMaclist     `yaml:"maclist,omitempty" json:"maclist,omitempty"`
 }
 
 // RenderedSNAT is a resolved SNAT/masquerade rule: source addresses masqueraded
@@ -207,6 +219,7 @@ func Render(in Input) (*RenderedConfig, error) {
 
 	// Per-device long-tail sections owned by this device.
 	renderPerDevice(in, out)
+	renderPerDeviceL2(in, out)
 
 	return out, nil
 }
@@ -449,5 +462,23 @@ func Compile(ctx context.Context, s *store.Store, device string) (*RenderedConfi
 	if in.RoutingRules, err = s.ListRoutingRules(ctx); err != nil {
 		return nil, err
 	}
+	if in.Tunnels, err = s.ListTunnels(ctx); err != nil {
+		return nil, err
+	}
+	if in.StoppedRules, err = s.ListStoppedRules(ctx); err != nil {
+		return nil, err
+	}
+	if in.ProxyARP, err = s.ListProxyARP(ctx); err != nil {
+		return nil, err
+	}
+	if in.ProxyNDP, err = s.ListProxyNDP(ctx); err != nil {
+		return nil, err
+	}
+	if in.ArpRules, err = s.ListArpRules(ctx); err != nil {
+		return nil, err
+	}
+	if in.Maclist, err = s.ListMaclist(ctx); err != nil {
+		return nil, err
+	}
 	return Render(in)
 }