fix(vpn): gluetun update needs -enduser flag in the init container

Co-Authored-By: Claude Opus 4.8 <[email protected]>

platform/vpn-egress/gluetun-gateway.yaml

@@ -33,7 +33,7 @@ spec:
         # fetch PIA's CURRENT list into the shared /gluetun volume BEFORE the main container starts.
         - name: update-servers
           image: qmcgaw/gluetun:v3.41.0
-          args: ["update", "-providers", "private internet access"]
+          args: ["update", "-enduser", "-providers", "private internet access"]
           resources:
             requests: { cpu: 25m, memory: 32Mi }
             limits: { memory: 128Mi }