feat: update deployment configuration and encrypted env loader

- Update Ansible playbooks and roles for application deployment
- Add new Gitea/Traefik troubleshooting playbooks
- Update Docker Compose configurations (base, local, staging, production)
- Enhance EncryptedEnvLoader with improved error handling
- Add deployment scripts (autossh setup, migration, secret testing)
- Update CI/CD workflows and documentation
- Add Semaphore stack configuration

deployment/ansible/templates/wireguard-client.conf.j2

@@ -8,8 +8,10 @@ PrivateKey = {{ client_private_key.stdout }}
 # Client IP address in VPN network
 Address = {{ client_ip }}/24
 
-# DNS server (VPN internal resolver)
+{% if wireguard_dns_servers | length > 0 %}
+# DNS servers provided via Ansible (optional)
 DNS = {{ wireguard_dns_servers | join(', ') }}
+{% endif %}
 
 [Peer]
 # Server public key