Integrate BACKBEAT SDK and resolve KACHING license validation

Major integrations and fixes:
- Added BACKBEAT SDK integration for P2P operation timing
- Implemented beat-aware status tracking for distributed operations
- Added Docker secrets support for secure license management
- Resolved KACHING license validation via HTTPS/TLS
- Updated docker-compose configuration for clean stack deployment
- Disabled rollback policies to prevent deployment failures
- Added license credential storage (CHORUS-DEV-MULTI-001)

Technical improvements:
- BACKBEAT P2P operation tracking with phase management
- Enhanced configuration system with file-based secrets
- Improved error handling for license validation
- Clean separation of KACHING and CHORUS deployment stacks

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

vendor/github.com/libp2p/go-libp2p-asn-util/asn.go

@@ -0,0 +1,95 @@
+package asnutil
+
+import (
+	"errors"
+	"fmt"
+	"net"
+	"sync"
+
+	"github.com/libp2p/go-cidranger"
+)
+
+var Store *lazyAsnStore
+
+func init() {
+	Store = &lazyAsnStore{}
+}
+
+type networkWithAsn struct {
+	nn  net.IPNet
+	asn string
+}
+
+func (e *networkWithAsn) Network() net.IPNet {
+	return e.nn
+}
+
+type asnStore struct {
+	cr cidranger.Ranger
+}
+
+// AsnForIPv6 returns the AS number for the given IPv6 address.
+// If no mapping exists for the given IP, this function will
+// return an empty ASN and a nil error.
+func (a *asnStore) AsnForIPv6(ip net.IP) (string, error) {
+	if ip.To16() == nil {
+		return "", errors.New("ONLY IPv6 addresses supported for now")
+	}
+
+	ns, err := a.cr.ContainingNetworks(ip)
+	if err != nil {
+		return "", fmt.Errorf("failed to find matching networks for the given ip: %w", err)
+	}
+
+	if len(ns) == 0 {
+		return "", nil
+	}
+
+	// longest prefix match
+	n := ns[len(ns)-1].(*networkWithAsn)
+	return n.asn, nil
+}
+
+func newAsnStore() (*asnStore, error) {
+	cr := cidranger.NewPCTrieRanger()
+
+	for _, v := range ipv6CidrToAsnPairList {
+		_, nn, err := net.ParseCIDR(v.cidr)
+		if err != nil {
+			return nil, fmt.Errorf("failed to parse CIDR %s: %w", v.cidr, err)
+		}
+
+		if err := cr.Insert(&networkWithAsn{*nn, v.asn}); err != nil {
+			return nil, fmt.Errorf("failed to insert CIDR %s in Trie store: %w", v.cidr, err)
+		}
+	}
+
+	return &asnStore{cr}, nil
+}
+
+// lazyAsnStore builds the underlying trie on first call to AsnForIPv6.
+// Alternatively, Init can be called to manually trigger initialization.
+type lazyAsnStore struct {
+	store *asnStore
+	once  sync.Once
+}
+
+// AsnForIPv6 returns the AS number for the given IPv6 address.
+// If no mapping exists for the given IP, this function will
+// return an empty ASN and a nil error.
+func (a *lazyAsnStore) AsnForIPv6(ip net.IP) (string, error) {
+	a.once.Do(a.init)
+	return a.store.AsnForIPv6(ip)
+}
+
+func (a *lazyAsnStore) Init() {
+	a.once.Do(a.init)
+}
+
+func (a *lazyAsnStore) init() {
+	store, err := newAsnStore()
+	if err != nil {
+		panic(err)
+	}
+	a.store = store
+}