wire tailscale serve via CLI (FQDN-aware), drop static serve.json — fixes headscale + bare-host dispatch