infra

Remove VPS host and mesh VPN stack

Fix wireguard client role with interactive config deploy.

Remove unused Cloudflare iptables whitelist task.

chore: ignore local git worktrees directory

chore(vps): replace wireguard/nginx/adguard with headscale and tailscale