Upgrade K3s and infrastructure with selective DNS relay

ansible/roles/common/files/k3s-control-plane-relay.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Selective Tailscale relay for K3s control-plane peers
+Wants=network-online.target
+After=network-online.target tailscaled.service
+Before=k3s.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/k3s-control-plane-relay
+
+[Install]
+WantedBy=multi-user.target