feat: Tailscale serve integration for secure remote access

This issue proposes optional Tailscale serve integration so users can securely expose the Hermes API server over their Tailnet without public ports or reverse proxies.