fix: remove unused imports/vars for cross-platform ci

- remove XdpBridge import, use fully qualified path
- gate XdpBridge usage with #[cfg(target_os = "linux")]
- suppress unused TUN vars on non-linux with _ binding

Author: root

sush_daemon/src/main.rs

@@ -5,7 +5,7 @@ use clap::{Parser, Subcommand};
 use sha2::{Digest, Sha256};
 use std::net::SocketAddr;
 use std::sync::Arc;
-use sush_core::{EncodingProfile, PortHopper, UserManager, XdpBridge};
+use sush_core::{EncodingProfile, PortHopper, UserManager};
 use tokio::time::Duration;
 
 #[cfg(target_os = "linux")]
@@ -390,6 +390,7 @@ async fn main() -> Result<()> {
                 }
                 #[cfg(not(target_os = "linux"))]
                 Mode::Tun => {
+                    let _ = (tun_name, tun_addr, tun_dst_addr); // suppress unused warning
                     anyhow::bail!("TUN mode is only supported on Linux");
                 }
                 Mode::Socks5 => {
@@ -1820,8 +1821,9 @@ async fn run_tun_mode_v3(
                                     if tunnel.peer_addr.port() == 0 {
                                         tunnel.peer_addr = peer;
                                         println!("Authenticated peer from {}", peer);
+                                        #[cfg(target_os = "linux")]
                                         if let std::net::SocketAddr::V4(v4) = peer {
-                                            let xdp = XdpBridge::new();
+                                            let xdp = sush_core::XdpBridge::new();
                                             let _ = xdp.authorize_ip(*v4.ip());
                                         }
                                         let mut state = web_state.state.write().await;
@@ -2039,8 +2041,9 @@ async fn run_tun_mode(
                                         println!("Authenticated peer connected from {}", peer);
 
                                         // Notify XDP bridge of authenticated client (for kernel bypass)
+                                        #[cfg(target_os = "linux")]
                                         if let std::net::SocketAddr::V4(v4_addr) = peer {
-                                            let xdp_bridge = XdpBridge::new();
+                                            let xdp_bridge = sush_core::XdpBridge::new();
                                             if let Err(e) = xdp_bridge.authorize_ip(*v4_addr.ip()) {
                                                 // Non-fatal: XDP may not be running
                                                 eprintln!("XDP bridge: {}", e);