HydraIssues

At venue ad6, the 3-node Deco X75 mesh sits behind the Omada in Router mode, so the entire mesh appears as a single client to Omada (and therefore to hydraneck). This caused IP/streaming conflicts (resolved by moving the Deco behind the Omada) and now hides per-device telemetry we want.

Action
======
Switch the main Deco unit to Access Point mode via the Deco app: More > Advanced > Operating Mode > Access Point Mode. All 3 X75s will then operate as APs only; Omada handles DHCP/routing; every device behind the mesh becomes an individual Omada client.

Why it matters
==============
- Removes the misleading single decomesh entry in the hydraneck enrollment list
- Unlocks per-client telemetry from Omada we currently cannot see: RSSI, Tx/Rx rate, retries, AP/SSID/band association, switch port and PoE state, per-client traffic, roaming events, DPI categories
- Fixes accurate per-body bandwidth and AP-to-body mapping in hydraneck
- Brings ad6 in line with how other Omada-only venues already report telemetry

Constraints
===========
DO NOT execute while the venue network is in use. The mode switch factory-resets Deco network config, drops all clients, changes DHCP authority, and likely changes the subnet. Realistic downtime: 30 to 60 minutes active, plus about an hour to fully settle. Schedule for a maintenance window with the venue closed and someone on-site.

Pre-flight checklist
====================
- Note the current Deco subnet, DHCP range, and any static reservations
- Confirm Omada DHCP pool is wide enough for all current clients plus the 3 Decos
- Snapshot the current hydraneck scan for ad6 as a before reference
- Verify the Omada uplink port for the main Deco is a LAN port, not WAN
- Have the Deco app logged in and ready
- Have hydraguard ready to refresh peer IPs after bodies re-DHCP

Post-switch verification
========================
- All 3 Decos visible as wired clients in Omada
- All bodies visible as individual clients in hydraneck (not aggregated behind the Deco)
- WireGuard tunnels back up for all bodies
- Sunshine sessions reachable
- Streaming smoke test on at least one body

Follow-up (separate, optional)
==============================
Add an infrastructure-MACs ignore-list to hydraneck so the 3 Deco LAN MACs do not clutter the unmanaged/enrollable list at ad6 and similar venues.