feat: switch to Tailscale sidecar + Traefik/Authentik via pngx.domverse-berlin.eu

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/deploy.yml

@@ -46,6 +46,7 @@ jobs:
           SECRET_KEY=${{ secrets.PNGX_SECRET_KEY }}
           MASTER_URL=${{ secrets.PNGX_MASTER_URL }}
           MASTER_TOKEN=${{ secrets.PNGX_MASTER_TOKEN }}
+          TS_AUTHKEY=${{ secrets.TS_AUTHKEY }}
           EOF
 
       - name: Deploy with docker compose