Replay-safe TLS-F ServerHello profile consistency

Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>

src/tls_front/cache.rs

@@ -364,6 +364,9 @@ impl TlsFrontCache {
                             warn!(domain = %cached.domain, "Skipping stale TLS cache entry (>72h)");
                             continue;
                         }
+                        cached
+                            .behavior_profile
+                            .refresh_server_hello_summary(&cached.server_hello_template);
                         let domain = cached.domain.clone();
                         self.set(&domain, cached).await;
                         loaded += 1;