Unusable addresses still present in discovery
coordinate: address CodeRabbit feedback from #808
coordinate: trust negative netcheck per family, filter CGNAT
coordinate: stop advertising unverified public DiscoveredIPs
Setting up a server behind, I got a tailscale and the external IP still listed as ones that the system thought were addressable, but they aren't