improved guest ssid support

[lts-rad]

separately from #401, which is meant to get a default sae password to work using sae_track_password=50, improve support for guest ssids

Features to include:

• block API access to guest ssid devices (maybe guest policy blocks it)
• auto set new devices from the guest ssid with the guest policy and default wan/dns
• hostapd may have changed behavior here but wifid needs to start a hostapd_cli event script for each virtual bss
• set the static guest password in the UI, or use the devices DB
• select wpa1, wpa2, or wpa3

technical details

• establishDevice loop needs to be aware of guest password access, as device wont be marked as wifi

[lts-rad]

UI

[lts-rad]

for SAE guest needs ieee80211w=1