feat(traefik): add TCP SSH entrypoints for Gitea (2221) and JARVIS (10171)

- New entrypoints: gitea-ssh/:2221, jarvis-ssh/:10171
- Expose both ports from the Traefik container
- gitea.yml: TCP passthrough router -> 10.1.71.129:2221
- jarvis.yml: TCP passthrough router -> 10.1.71.131:22
- Both use HostSNI(*) — dedicated entrypoints, no TLS wrapping needed
- UniFi to forward both ports to lightning-lane

boilerplates/traefik/dynamic/jarvis.yml

@@ -33,3 +33,17 @@ http:
       loadBalancer:
         servers:
           - url: "http://10.1.71.131:8642"
+
+tcp:
+  routers:
+    jarvis-ssh:
+      rule: "HostSNI(`*`)"
+      entryPoints:
+        - jarvis-ssh
+      service: jarvis-ssh
+
+  services:
+    jarvis-ssh:
+      loadBalancer:
+        servers:
+          - address: "10.1.71.131:22"