Tailscale:WireGuard-based mesh VPN

Pulls dev machine, phone, laptop onto one private network — dev servers reachable across devices without ever opening a public port.