feat: replace hosts file with DLL injection hook

Adds openfut-hook/, a Windows DLL (cdylib, x86_64-pc-windows-gnu) that
patches the IAT of FIFA 23 at load time to redirect getaddrinfo calls
for fut.ea.com / utas.*.fut.ea.com to 127.0.0.1, sending all FUT
traffic to the local bridge — no /etc/hosts changes needed.

Deployment: the launcher copies openfut_hook.dll into the FIFA 23 game
folder as version.dll (a DLL FIFA loads but delegates to system).
Proton picks up the local copy automatically when you set:
  WINEDLLOVERRIDES="version=n,b" %command%
in Steam launch options.

Also updates cert install to try the Wine/Proton cert store (wine
certutil) before falling back to the Linux system CA store, and removes
all hosts file code from setup.rs / app.rs.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

openfut-hook/src/lib.rs

@@ -0,0 +1,37 @@
+mod hooks;
+mod iat;
+
+use windows_sys::Win32::{
+    Foundation::{BOOL, HMODULE, TRUE},
+    System::SystemServices::DLL_PROCESS_ATTACH,
+    Networking::WinSock::ADDRINFOA,
+};
+
+#[no_mangle]
+pub unsafe extern "system" fn DllMain(
+    _module: HMODULE,
+    reason: u32,
+    _reserved: *mut (),
+) -> BOOL {
+    if reason == DLL_PROCESS_ATTACH {
+        install_hooks();
+    }
+    TRUE
+}
+
+unsafe fn install_hooks() {
+    let real_ptr = iat::resolve(b"ws2_32.dll\0", b"getaddrinfo\0");
+    if real_ptr.is_null() {
+        return;
+    }
+
+    let real_fn: unsafe extern "system" fn(
+        *const u8,
+        *const u8,
+        *const ADDRINFOA,
+        *mut *mut ADDRINFOA,
+    ) -> i32 = std::mem::transmute(real_ptr);
+
+    hooks::set_real(real_fn);
+    iat::patch_iat(real_ptr, hooks::hooked_getaddrinfo as *const ());
+}