servers/psmf: add psmf server docs, nginx/tailscale config, and data-sync

Document the psmf host (DNS, second tailscale netns instance, nginx
vhosts, migration plan) and add the docker-dev-22 psmf-data-sync
service plus the storage-23 pg_hba.conf entry it needs.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

servers/psmf/files/tailscaled-ts2.service

@@ -0,0 +1,21 @@
+# location: /etc/systemd/system/tailscaled-ts2.service
+[Unit]
+Description=tailscaled in ts2 netns
+After=ts2-netns.service network-online.target
+Requires=ts2-netns.service
+BindsTo=ts2-netns.service
+
+[Service]
+ExecStart=/usr/sbin/ip netns exec ts2 /usr/sbin/tailscaled \
+  --state=/var/lib/tailscale-ts2/tailscaled.state \
+  --socket=/run/tailscale-ts2/tailscaled.sock \
+  --port=41642 \
+  --tun=tailscale0
+Restart=on-failure
+RestartSec=5s
+
+RuntimeDirectory=tailscale-ts2
+StateDirectory=tailscale-ts2
+
+[Install]
+WantedBy=multi-user.target