Document UDP connection ID validation policy

[josecelano]

Summary

• specify issue Add configurable UDP connection ID validation policy #1136 as a per-listener UDP connection ID validation policy with strict and disabled modes
• keep strict validation as the secure default and reject an unsafe expiration-only mode
• define announce, scrape, connect, metrics, banning, warning, and mixed-listener behavior
• add automatic and mandatory manual verification plans
• add Add configurable UDP connection ID validation policy #1136 to configuration overhaul EPIC Overhaul: Configuration (schema v3.0.0) #1978 after Allow setting the IP bans reset interval via configuration and remove duplicate execution of cronjob to clean bans #1453
• reconcile the EPIC with existing subissue Add per-HTTP-tracker config option to use peer IP from ip GET parameter (sub-issue of #1978) #1987, yielding 11 ordered subissues with final cleanup last

Scope

This is a specification-only PR. It does not implement the configuration or UDP behavior. Implementation starts after this specification is reviewed and merged.

Related to #1136
Related to #1978

Verification

• linter all
• pre-commit hook: cargo machete, cargo deny check bans, all linters, workspace doc tests
• pre-push hook: nightly format/check/docs and full stable workspace tests
• YAML frontmatter parsing
• git diff --check
• GPG signature verification

[Copilot]

Pull request overview

This PR updates the configuration-overhaul EPIC documentation to include and position issue #1136, and adds a new spec document defining the UDP connection ID validation policy (strict/disabled) intended for schema v3.

Changes:

• Add a new issue specification doc for #1136 defining the per-listener UDP connection ID validation policy and verification plan.
• Update EPIC #1978 spec to include #1136 (and reconcile ordering/links with existing #1987) and reflect 11 ordered subissues.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
docs/issues/open/1978-configuration-overhaul-epic.md	Updates EPIC metadata, links, and subissue ordering to include #1136 and align the dependency/plan sections accordingly.
docs/issues/open/1136-1978-configurable-udp-connection-id-validation-policy.md	Adds the full specification for #1136, including security rationale, scope, acceptance criteria, and verification plan.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[josecelano]

ACK c7663a0