Add wireguard-tools v1.0.20260223 to rocky9

Build the wg and wg-quick CLI from the upstream tag snapshot; only the
rocky9 image builds it for now.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

rocky9/Dockerfile

@@ -824,6 +824,13 @@ RUN --mount=type=bind,from=sources,source=sqlite-autoconf-3540100.tar.gz,target=
     && cd .. \
     && rm -rf src
 
+RUN --mount=type=bind,from=sources,source=wireguard-tools-v1.0.20260223.tar.xz,target=/tmp/wireguard-tools.tar.xz \
+    mkdir src \
+    && tar --extract --xz --file=/tmp/wireguard-tools.tar.xz --directory=src --strip-components=1 \
+    && make --directory=src/src --jobs="$(nproc)" \
+    && make --directory=src/src install PREFIX=${PREFIX} WITH_WGQUICK=yes WITH_SYSTEMDUNITS=no WITH_BASHCOMPLETION=no \
+    && rm -rf src
+
 COPY source-stack.cmake ${PREFIX}/share/source-stack/source-stack.cmake
 
 CMD ["/bin/bash"]