fix(vpn): VPN_ENDPOINT_IP for custom mode (.ovpn hostname not parseable)

gluetun's custom parser rejects the .ovpn's 'remote sweden.privacy.network' (needs
an IP). sweden.privacy.network LB pool = 158.173.241.{22,34,55,112,239}; pin .22
(verified to handshake) via VPN_ENDPOINT_IP/PORT while the .ovpn supplies cipher/CA.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

platform/vpn-egress/gluetun-gateway.yaml

@@ -46,6 +46,13 @@ spec:
               value: "openvpn"
             - name: OPENVPN_CUSTOM_CONFIG
               value: "/config/pia.ovpn"      # the operator's PIA .ovpn (pia-custom-ovpn Secret)
+            # gluetun's custom parser needs an IP (not the .ovpn's `remote sweden.privacy.network`
+            # hostname). sweden.privacy.network's load-balanced pool is 158.173.241.{22,34,55,112,239};
+            # pin a currently-healthy one. NOTE: if PIA rotates it out, re-resolve + update.
+            - name: VPN_ENDPOINT_IP
+              value: "158.173.241.22"
+            - name: VPN_ENDPOINT_PORT
+              value: "1198"
             # PIA username/password for the .ovpn's auth-user-pass (pia-credentials SOPS Secret):
             - name: OPENVPN_USER
               valueFrom: