ip.bind: bind outbound connections to the configured address (#9834)

* ip.bind: bind outbound connections to the configured address

-ip.bind only governed listeners; outbound gRPC and HTTP connections let
the OS pick the source IP, which may not even be able to reach the
target. Mirror the bind address into a process-global source address and
apply it to outbound TCP dials: the gRPC context dialer, the per-client
HTTP transports, and the default transport. Loopback targets and unix
sockets keep the OS-chosen source so same-host traffic still works.

* ip.bind: first-write-wins source IP, skip on address-family mismatch

Make SetOutboundLocalIP first-write-wins so a `weed server` component's own
bind setting (run in its goroutine) can't clobber the process-wide source
address the top-level -ip.bind already established for the other components.

Skip source binding when the target is a literal IP of a different family
than the bind address, since forcing a mismatched source fails the dial.

weed/command/server.go

@@ -274,6 +274,9 @@ func runServer(cmd *Command, args []string) bool {
 	if *serverBindIp == "" {
 		serverBindIp = serverIp
 	}
+	// Bind outbound connections to the same address up front so every
+	// component started below inherits it, before any of them dials.
+	util.SetOutboundLocalIP(*serverBindIp)
 
 	if *serverMetricsHttpIp == "" {
 		*serverMetricsHttpIp = *serverBindIp