feat: add canary, tcping, archive, resolve plugins

canary: generate realistic fake credentials (token/aws/basic) for
planting as canary tripwires. Per-channel state persistence.

tcping: TCP connect latency probe through SOCKS5 proxy with
min/avg/max reporting. Proxy-compatible alternative to traceroute.

archive: save URLs to Wayback Machine via Save Page Now API,
routed through SOCKS5 proxy.

resolve: bulk DNS resolution (up to 10 hosts) via TCP DNS through
SOCKS5 proxy with concurrent asyncio.gather.

83 new tests (1010 total), docs updated.

docs/CHEATSHEET.md

@@ -134,6 +134,25 @@ SASL auto-added when sasl_user/sasl_pass configured.
 !unload <plugin>   # Remove a plugin (admin)
 ```
 
+## Archive
+
+```
+!archive https://example.com/page   # Save to Wayback Machine
+```
+
+URL must have `http://` or `https://` scheme. 30s timeout. SOCKS5-proxied.
+
+## Bulk DNS
+
+```
+!resolve example.com github.com     # A records (concurrent)
+!resolve example.com AAAA           # Specific type
+!resolve 1.2.3.4 8.8.8.8           # Auto PTR for IPs
+```
+
+Max 10 hosts. Types: A, AAAA, MX, NS, TXT, CNAME, PTR, SOA.
+TCP DNS via SOCKS5, server 1.1.1.1.
+
 ## Recon
 
 ```
@@ -224,9 +243,26 @@ Categories: sqli, xss, ssti, lfi, cmdi, xxe
 !refang hxxps[://]evil[.]com   # Refang IOC
 ```
 
+## Canary Tokens
+
+```
+!canary gen db-cred            # 40-char hex token (default)
+!canary gen aws staging-key    # AWS AKIA keypair
+!canary gen basic svc-login    # user:pass pair
+!canary list                   # List channel canaries
+!canary info db-cred           # Show full token
+!canary del db-cred            # Delete canary (admin)
+```
+
+Types: `token` (hex), `aws` (AKIA+secret), `basic` (user:pass).
+Max 50/channel. `gen`/`del` admin only. Persists across restarts.
+
 ## Network
 
 ```
+!tcping example.com            # TCP latency (port 443, 3 probes)
+!tcping example.com 22         # Custom port
+!tcping example.com 80 5       # Custom port + count (max 10)
 !cidr 10.0.0.0/24              # Subnet info
 !cidr contains 10.0.0.0/8 10.1.2.3  # Membership check
 !portcheck 10.0.0.1            # Scan common ports