Radical simplification — no more VPS data plane:
- Delete parahub-vpn-tunnel init script (GRE6 no longer used)
- Revert heartbeat to clean version (no tunnel_ip parsing)
- Add parahub-gw-check: monitors WireGuard handshake, switches
batman-adv gw_mode between server/client (cron every 2 min)
- Update uci-defaults: remove vpn_tunnel zone/interface, start
bumblebee as gw_mode=client (health check promotes to server)
Guest internet now requires Mullvad — kill switch by design.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
