port to Pi 4 'wan': onboard eth0+wlan0 as NM WANs, AP stack verbatim

The USB hub (5GHz + 2.4GHz AP dongles, Starlink + LAN RTL8153s) moves over
from wayback; MAC-derived wlx*/enx* names travel with it, so hostapd/
networkd/cockpit configs are unchanged. Pi diffs only: failover WAN list
(wlan0 wifi 100, eth0 150, starlink USB 200, Koodo 300), cpu_thermal
sensor, bcm2835 watchdog 10s, no HA DNAT/lease, and deploy.sh drops
battery/lid/heartbeat/ZT-dns. Netplan reference in ap/50-van-wan.yaml.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

dns/99-ztuga7c2kh.network.generated

@@ -1,13 +0,0 @@
-# vim: ft=systemd
-# --- Managed by zerotier-systemd-manager. Do not remove this comment. ---
-[Match]
-Name=ztuga7c2kh
-
-[Network]
-Description=suspicious_house
-DHCP=no
-DNS=192.168.196.115
-DNS=192.168.10.5
-Domains=~wrede.pvt ~196.168.192.in-addr.arpa ~c.e.3.d.d.f.ip6.arpa
-ConfigureWithoutCarrier=true
-KeepConfiguration=static

dns/zerotier-systemd-manager.service

@@ -1,8 +0,0 @@
-[Unit]
-Description=Update zerotier per-interface DNS settings
-Requires=zerotier-one.service
-After=zerotier-one.service
-
-[Service]
-Type=oneshot
-ExecStart=/usr/bin/zerotier-systemd-manager

dns/zerotier-systemd-manager.timer

@@ -1,9 +0,0 @@
-[Unit]
-Description=Update zerotier per-interface DNS settings
-
-[Timer]
-OnStartupSec=1min
-OnUnitInactiveSec=1min
-
-[Install]
-WantedBy=timers.target

dns/zt-network.local.conf

@@ -1,4 +0,0 @@
-allowManaged=1
-allowGlobal=0
-allowDefault=0
-allowDNS=1

dns/zt-search.conf

@@ -1,3 +0,0 @@
-[Network]
-Domains=
-Domains=wrede.pvt ~196.168.192.in-addr.arpa ~c.e.3.d.d.f.ip6.arpa