Fix Cascade egress verify to bind awg0 IP (v2.2.1).

Use client-subnet policy routing for curl checks instead of cascade peer Address; soft-warn when echo services fail but the route is OK.

translations/fa.json

@@ -1,4 +1,4 @@
-{
+{
     "nav_servers":  "سرورها",
     "nav_users":  "کاربران",
     "nav_invites":  "لینک دعوت",
@@ -554,7 +554,7 @@
     "cascade_opt_wait_handshake":  "Wait for exit handshake",
     "cascade_opt_wait_handshake_hint":  "Do not mark cascade active if the exit peer never answers.",
     "cascade_verify_egress":  "Verify egress IP",
-    "cascade_verify_egress_hint":  "After handshake, curl ifconfig.me via the cascade Address; fail and roll back if empty.",
+    "cascade_verify_egress_hint":  "After handshake, verify policy route from awg0 IP via cascade, then curl public-IP services. Soft-warn if curl fails but route is OK.",
     "cascade_opt_keep_dns":  "Keep DNS from exit config",
     "cascade_opt_keep_dns_hint":  "Usually off — the client sets DNS itself.",
     "cascade_opt_handshake_timeout":  "Handshake timeout (sec)",