[bojemoi] feat(wg-gateway): activate container VPN gateway for scan services

Commit `3838800`

Scale wg-gateway to replicas: 1 in stack (was 0)
Fix wg-gateway-start.sh: strip route-up/script-security from .ovpn (missing file)
Fix wg-gateway-start.sh: detect tun interface dynamically (tun0/tun1)
All scan services (ak47, bm12, uzi, nuclei-worker, zap) now exit via ProtonVPN container (103.125.235.22) instead of host routing table
Simplifies host routing: no more need for /1 catch-all bypass routes

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com