Add snowflake-proxy as a native systemd service on ringtail to help
censored users reach the Tor network. This is a bridge proxy, not an
exit node — traffic exits through Tor exit nodes elsewhere.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>