Replace ToS-derived endpoint visibility with internal/external locality
decided by ordered registry rules (tos_anonymized, prefixes, addresses or
address files). Stats tables store src_locality/dst_locality pairs that map
to ingress, egress, lateral, and transit. The canonical rules join the
product identity as counts and digests, and table/contract versions bump.