Expand capture-only NetScaler NITRO simulation and crash recovery

.env.example

@@ -4,6 +4,8 @@
 # --- Decoy listener (honeypot.py) ---
 HONEYPOT_BIND=0.0.0.0
 HONEYPOT_PORT=8443
+# Synthetic NITRO identity only; does not change any installed appliance.
+HONEYPOT_VERSION="NetScaler NS14.1: Build 29.63.nc"
 # Exact transport IP allowed to speak PROXY v1 (your source-preserving ingress). Empty disables.
 HONEYPOT_PROXY_PROTOCOL_FROM=
 # Comma-separated CIDRs whose CF-Connecting-IP / X-Forwarded-For may be trusted
@@ -24,8 +26,9 @@ INGRESS_ALLOW_FROM=
 VIEWER_BIND=127.0.0.1
 VIEWER_PORT=8787
 VIEWER_LOG_DIR=/var/lib/decoy/http
-# Extra client IPs to hide (the host's public IP is auto-detected). Comma-separated.
+# Extra client IPs to hide. Comma-separated. The supplied service disables public-IP discovery.
 VIEWER_HIDE_IP=
 
 # --- VM execution backend (optional, isolated guest only) ---
-DECOY_VM_CONFIG=/etc/decoy-vm.json
+DECOY_VM_CONFIG=
+# Strict --simulation-only mode refuses a configured execution backend.