- Add .ts.net domains to trusted internal networks for HTTP redirects - This allows OIDC clients on internal Tailscale networks to use HTTP - Add CLAUDE.md documentation for secrets management and deployment - Add Tailscale ingress for staging