chore: bump x to v0.15.1, add e2e tests for chainGroup and sniffing

- Bump github.com/go-gost/x v0.15.0 → v0.15.1
- ChainGroupSuite: matcher routing by host, probe dead-chain pre-marking
- SniffingSuite: SOCKS5+HTTPS w/o SNI, debug-only log on empty SNI
- Add RunHTTPSEchoContainer and https_echo.py test helper

tests/e2e/utils.go

@@ -227,6 +227,37 @@ func RunResolverResponderContainer(ctx context.Context, networkName, targetIP st
 	})
 }
 
+// RunHTTPSEchoContainer starts an HTTPS echo server (self-signed cert) that
+// responds with "hello-gost" on port 8443. The container is registered with
+// the network alias "https-echo".
+func RunHTTPSEchoContainer(ctx context.Context, networkName string) (testcontainers.Container, error) {
+	return testcontainers.GenericContainer(ctx, testcontainers.GenericContainerRequest{
+		ContainerRequest: testcontainers.ContainerRequest{
+			FromDockerfile: testcontainers.FromDockerfile{
+				Context:    ".",
+				Dockerfile: "Dockerfile",
+				Repo:       "gost-e2e",
+				Tag:        "latest",
+				KeepImage:  true,
+				BuildOptionsModifier: func(opts *client.ImageBuildOptions) {
+					opts.NetworkMode = "host"
+				},
+			},
+			Networks: []string{networkName},
+			NetworkAliases: map[string][]string{
+				networkName: {"https-echo"},
+			},
+			Files: []testcontainers.ContainerFile{
+				{HostFilePath: "scripts/https_echo.py", ContainerFilePath: "/scripts/https_echo.py", FileMode: 0644},
+			},
+			ExposedPorts: []string{"8443/tcp"},
+			Cmd:          []string{"python3", "/scripts/https_echo.py"},
+			WaitingFor:   wait.ForExposedPort(),
+		},
+		Started: true,
+	})
+}
+
 func RunGostContainer(ctx context.Context, networkName, yamlPath string) (testcontainers.Container, error) {
 	return runGostContainer(ctx, networkName, yamlPath, nil, nil, nil)
 }