Rama 0.4: System proxy and PAC support

Rama 0.4 introduces a SystemProxyLayer that automatically respects OS-wide HTTP, HTTPS and SOCKS5 proxy settings, including NO_PROXY bypass rules. It also adds PAC support by embedding a JavaScript runtime inside a Wasmtime-based WASM sandbox, exposed through the new rama-pac crate and CLI tools.