Self-Hosting RustDesk on Tailscale Without Opening a Single Public Port

Run rustdesk-server-oss behind Tailscale with zero public ports, plus the macOS root-daemon config fight that ate an hour and nobody has documented.