Text this: Detecting Low-Rate Flow-Table Attacks in KDN with a Hybrid GRU–CatBoost Approach.