When a proxy is set but no --dns flag or config dnsAddr is specified, automatically use localhost:5353 as the DNS bridge target. This ensures DNS queries go through GreyHaven's controlled infrastructure rather than leaking to public resolvers via tun2socks. Also update proxy credential injection to always set credentials (defaulting to "proxy:proxy" when no command name is available), as required by gost's auth flow.