Replace patchelf crack with Freeloader LD_PRELOAD approach

- Multi-stage Dockerfile: discover patterns from PMS binary (capstone),
  compile .so with zig (musl), layer onto lscr.io/linuxserver/plex
- Uses LD_PRELOAD instead of patchelf (which corrupts Plex's musl loader)
- Auto-discovery: broad structural patterns with string-anchored fallback
  (//feature) and relationship-based fallback (BITSET_REF within BS_INIT)
- hook.cpp uses __has_include for generated patterns with hardcoded fallbacks
- Custom wrapper.sh (no traffic_logger preload)
- Vendored Freeloader source (github.com/authrequest/Freeloader, AGPL-3.0)
- Removed stale plexmediaserver_crack.so binary
- Supports Plex 1.43.3+ (verified against 1.43.2 and 1.43.3)

Freeloader/scripts/plex-tailnet/lib/common.sh

@@ -0,0 +1,76 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
+# shellcheck shell=bash
+#
+# Shared helpers for the plex-tailnet scripts. SOURCE this file; do not run it.
+# Keeping the generic concerns (logging, dry-run execution, prompts, guards,
+# secret redaction) here removes duplication between the setup scripts and keeps
+# each script focused on its own orchestration.
+
+# --- colour-aware logging (colours only on a TTY) ---------------------------
+_c()   { [[ -t 1 ]] && printf '%s' "$1" || true; }
+log()  { printf '%s[*]%s %s\n' "$(_c $'\033[1;34m')" "$(_c $'\033[0m')" "$*"; }
+ok()   { printf '%s[+]%s %s\n' "$(_c $'\033[1;32m')" "$(_c $'\033[0m')" "$*"; }
+warn() { printf '%s[!]%s %s\n' "$(_c $'\033[1;33m')" "$(_c $'\033[0m')" "$*" >&2; }
+die()  { printf '%s[x]%s %s\n' "$(_c $'\033[1;31m')" "$(_c $'\033[0m')" "$*" >&2; exit 1; }
+
+# --- command execution that honours DRY_RUN ---------------------------------
+: "${DRY_RUN:=0}"
+run() {
+  if [[ $DRY_RUN -eq 1 ]]; then
+    printf '   +'; printf ' %q' "$@"; echo
+  else
+    "$@"
+  fi
+}
+
+# --- fail fast with a located diagnostic ------------------------------------
+# Usage: enable_error_trap   (after sourcing). Tolerated failures must be
+# guarded with `|| true` / `|| warn ...` as usual.
+__err_trap() { warn "aborted (exit $1) near line $2"; exit "$1"; }
+enable_error_trap() { trap '__err_trap "$?" "$LINENO"' ERR; }
+
+# --- guards / predicates ----------------------------------------------------
+require_root() { [[ "${EUID:-$(id -u)}" -eq 0 ]] || die "must run as root (use sudo)"; }
+need_cmd()     { command -v "$1" >/dev/null 2>&1 || die "required command not found: $1"; }
+have_cmd()     { command -v "$1" >/dev/null 2>&1; }
+is_port()      { [[ "$1" =~ ^[0-9]+$ ]] && (( 10#$1 >= 1 && 10#$1 <= 65535 )); }
+
+# --- interactive prompts (read the controlling terminal directly) -----------
+ask_yes_no() { # question [default Y|N] -> 0 = yes, 1 = no
+  local q="$1" def="${2:-Y}" ans prompt
+  [[ "$def" == "Y" ]] && prompt="[Y/n]" || prompt="[y/N]"
+  read -r -p "$(printf '%s[?]%s %s %s ' "$(_c $'\033[1;36m')" "$(_c $'\033[0m')" "$q" "$prompt")" ans </dev/tty || ans=""
+  ans="${ans:-$def}"
+  [[ "$ans" =~ ^[Yy] ]]
+}
+
+ask_choice() { # question default opt...  -> echoes the chosen value (prompt on stderr)
+  local q="$1" def="$2"; shift 2
+  local opts=("$@") i ans o
+  {
+    printf '%s[?]%s %s\n' "$(_c $'\033[1;36m')" "$(_c $'\033[0m')" "$q"
+    for i in "${!opts[@]}"; do
+      printf '      %d) %s%s\n' "$((i + 1))" "${opts[$i]}" "$([[ ${opts[$i]} == "$def" ]] && echo ' (default)')"
+    done
+    printf '    choice [%s]: ' "$def"
+  } >&2
+  read -r ans </dev/tty || ans=""
+  [[ -z "$ans" ]] && { printf '%s' "$def"; return; }
+  if [[ "$ans" =~ ^[0-9]+$ ]] && (( ans >= 1 && ans <= ${#opts[@]} )); then
+    printf '%s' "${opts[$((ans - 1))]}"; return
+  fi
+  for o in "${opts[@]}"; do [[ "$ans" == "$o" ]] && { printf '%s' "$o"; return; }; done
+  printf '%s' "$def"
+}
+
+# --- secret redaction for logging -------------------------------------------
+# redact_after FLAG ARG... -> echoes ARGs with the value following FLAG masked.
+redact_after() {
+  local flag="$1"; shift
+  local out=() mask=0 a
+  for a in "$@"; do
+    if [[ $mask -eq 1 ]]; then out+=("***"); mask=0
+    else out+=("$a"); [[ "$a" == "$flag" ]] && mask=1; fi
+  done
+  printf '%s' "${out[*]}"
+}