Adds observability and fixes cross cases

- strict-kem vs strict-rp said "Connected + Quantum resistance: true" but it is actually blocked
- perm-kem vs perm-rp "Connected + Quantum resistance: true" but it's a classic WG link, without PQ safety

client/status/status_test.go

@@ -375,6 +375,8 @@ func TestParsingToJSON(t *testing.T) {
           "fqdn": "some-localhost.awesome-domain.com",
           "quantumResistance": false,
           "quantumResistancePermissive": false,
+          "mlkemEnabled": false,
+          "mlkemStrict": false,
           "networks": [
             "10.10.0.0/24"
           ],
@@ -494,6 +496,8 @@ wireguardPort: 51820
 fqdn: some-localhost.awesome-domain.com
 quantumResistance: false
 quantumResistancePermissive: false
+mlkemEnabled: false
+mlkemStrict: false
 networks:
     - 10.10.0.0/24
 forwardingRules: 0