Add ECH support for NaiveProxy outbound and tls.ech.query_server_name option

- Enable ECH for NaiveProxy outbound with DNS resolver integration
- Add query_server_name option to override domain for ECH HTTPS record queries
- Update cronet-go dependency and remove windows_386 support

option/tls.go

@@ -215,9 +215,10 @@ type InboundECHOptions struct {
 }
 
 type OutboundECHOptions struct {
-	Enabled    bool                       `json:"enabled,omitempty"`
-	Config     badoption.Listable[string] `json:"config,omitempty"`
-	ConfigPath string                     `json:"config_path,omitempty"`
+	Enabled         bool                       `json:"enabled,omitempty"`
+	Config          badoption.Listable[string] `json:"config,omitempty"`
+	ConfigPath      string                     `json:"config_path,omitempty"`
+	QueryServerName string                     `json:"query_server_name,omitempty"`
 
 	// Deprecated: not supported by stdlib
 	PQSignatureSchemesEnabled bool `json:"pq_signature_schemes_enabled,omitempty"`