feat(tailscale): add opt-in Tailscale outbound nodes and bypass Inject Tailscale proxies, route rules, and fake-IP filters into the generated Clash config when enabled - #2270