Long-lived VPN WebSocket sessions inflate P95 request duration; keep 5xx/down/cert alerts for xui unchanged.
Lint tracked YAML files without scanning generated dependencies. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>