Warn-level PSK-DIAG logs in Manager.OnConnected: confirm the remote peer
advertises a rosenpass key (so we know the far side has RP enabled) and that RP
negotiation is started (initiator flag). Paired with the existing 'set PSK on WG'
log, a bundle now shows whether RP starts but never completes on the client.