Fix fly-deploy WARNING by starting nginx before Tailscale, deferring upstream DNS resolution to request time.