- Add SOPS-encrypted tailscale-operator-authkey secret for operator auth - Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000) - Enable trade-dashboard TsProxy (was waiting for operator install)