Document Tailscale-only SSH/WebGUI after removing EasyRule :22 and blocking wanip 22/10443. Co-authored-by: Cursor <cursoragent@cursor.com>
SPEC-053/ACCESS include roger ed25519 key and ProxyJump config so admin can reach VM100 without WAN exposure. Co-authored-by: Cursor <cursoragent@cursor.com>