Stable v2.9.34

• fix(waf): re-verify logrotate self-heal on every agent start, not just first install
• feat(stats): surface the accurate cookie-based demo visitor count
• fix(stats): filter demo-visitor scanners that forge the demo Referer
• fix(stats): stop leaking the Postgres password via docker exec argv
• fix(stats): separate active vs. all-time counts on licensed/trial cards
• fix(stats): scope Panel-Version/Update-Kanal to active installs only
• feat(stats): add a Licenses tab with active-installation counts