servers/shadow: open GitLab SSH port, add docker-dev/czechultimate nginx routes

Forward tcp/33022 (FORWARD, LIBVIRT_INP/OUT, PREROUTING DNAT to
192.168.123.21) so the GitLab remote is reachable, add nginx vhosts
for docker-dev-22 and czechultimate.cz, and route fuj-management
through the k8s gateway. Also record saint's eno0 interface config.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

servers/saint/etc/ifcfg-eno0

@@ -0,0 +1,22 @@
+TYPE="Ethernet"
+BOOTPROTO="none"
+DEFROUTE="yes"
+IPV4_FAILURE_FATAL="no"
+IPV6INIT="yes"
+IPV6_AUTOCONF="yes"
+IPV6_DEFROUTE="yes"
+IPV6_FAILURE_FATAL="no"
+NAME="eno1"
+UUID="2f881122-85e5-4078-8cec-cf4a7e465321"
+DEVICE="eno1"
+ONBOOT="yes"
+IPADDR="87.236.197.83"
+PREFIX="23"
+GATEWAY="87.236.196.1"
+DNS1="87.236.198.210"
+#DNS1="87.236.198.211"
+DNS2="89.187.142.8"
+IPV6_PEERDNS="yes"
+IPV6_PEERROUTES="yes"
+IPV6_PRIVACY="no"
+ZONE=public