v3.4.2

## Fixed
- **Web Remote broken after enrollment outbound gate (#313, #302):** PunchHole/RequestRelay from the panel `/ws/rendezvous` proxy (default loopback CIDRs via `PANEL_SIGNAL_PROXY_CIDRS`) are accepted again without requiring a registered RustDesk peer. Unapproved clients and anonymous public initiators remain blocked. Ships via panel update (Go signal restart). Native/all-in-one needs no env change; Docker split console↔server must set `PANEL_SIGNAL_PROXY_CIDRS` to the console CIDR if still denied.
- **npm audit (`brace-expansion`):** override bumped to `^5.0.8` (GHSA-mh99-v99m-4gvg) so Web Console CI `npm audit --omit=dev` passes on stable.

**Channel:** stable `main` → **3.4.2**
**Deploy:** ships via panel Settings → Updates (Go signal restart). Native/all-in-one: no manual env.
**Verify:** Web Remote to an online peer works (no generic Error / Device not found); signal log no longer shows `initiator_not_registered` for `::1` / `127.0.0.1` on Web Remote punch.

Related: https://github.com/UNITRONIX/BetterDesk/issues/313 · https://github.com/UNITRONIX/BetterDesk/issues/302


## What's Changed
* Hotfix: restore Web Remote after enrollment outbound gate (#313) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/316
* chore: release version 3.4.2 [version-bump] by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/317


**Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.1...v3.4.2