ip route show omits /32 suffix for host routes, but resolved lists
from antifilter contain explicit /32. This mismatch caused comm to
mark all host routes as stale and delete them immediately after loading.

Normalize both sides by stripping /32 before comparison.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>