fix: route Outline API via Tailscale subnet instead of Docker DNS

- Add TS_EXTRA_ARGS=--accept-routes so sidecar uses VPS-advertised subnet
- Use direct container IP (172.29.0.13) instead of unresolvable hostname

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/deploy.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Write .env
         run: |
           cat > .env << EOF
-          OUTLINE_URL=http://outline:3000
+          OUTLINE_URL=http://172.29.0.13:3000
           OUTLINE_TOKEN=${{ secrets.OUTLINE_TOKEN }}
           TS_AUTHKEY=${{ secrets.TS_AUTHKEY }}
           EOF