v0.4.0

Changelog

• 286685d: Merge pull request #6 from niklas-schmidt-dev/cloudflare-tunnel (@cn0ss)
• 146d499: feat: Cloudflare Tunnel as the stronger web option, with no open web port (@cn0ss)
• a4e21dc: feat: reboot at the end and check that the lockdown comes back (@cn0ss)
• 7f97c91: fix: bound the reboot wait, retry a login into the old boot, keep the password when hardening was skipped (@cn0ss)
• 1851cb9: fix: ensure CA certificates before fetching the cloudflared apt repository (@cn0ss)
• 8b81389: fix: interruptible Tailscale SSH check, port 22, intact summary colours, no Tailscale SSH switching over the tailnet (@cn0ss)
• 4f908e4: fix: tunnel readiness from our own cloudflared only, remove a deselected tunnel, always ensure curl (@cn0ss)
• 9bc3e7c: fix: turn Tailscale SSH on last, and update the system before installing (@cn0ss)