feat(wayvnc): add config and user service for tailnet-only VNC access

Binds to the tailscale IP only, with PAM auth over TLS. TLS cert/key
are machine-local secrets and intentionally not tracked.

.gitignore

@@ -58,6 +58,11 @@
 !.config/zed/settings.json
 !.config/uwsm/
 !.config/uwsm/env
+!.config/wayvnc/
+!.config/wayvnc/config
+!.config/systemd/
+!.config/systemd/user/
+!.config/systemd/user/wayvnc.service
 !.config/kitty/
 !.config/kitty/kitty.conf
 !.config/kitty/themes/