feat: pridat netbird roli do priprav-novy-server.yml

Nove role:
- roles/netbird/ - instaluje NetBird mesh VPN klient

Konfigurace:
- netbird_setup_key: '' (placeholder, dopln v group_vars/all.yml)
- netbird_run_as_system_service: true
- netbird_management_url: 'https://api.netbird.io'

Playbook priprav-novy-server.yml:
- pridana role netbird mezi docker a fail2ban
- update hlavicky (krok 8 NetBird)
- update README strom (netbird role)

playbooks/priprav-novy-server.yml

@@ -9,7 +9,8 @@
 # 5. Docker Engine + Compose plugin
 # 6. Uzivatel deploy v docker group (docker bez sudo)
 # 7. Adresarova struktura (/home/deploy/{docker,scripts,backups,logs,...})
-# 8. fail2ban (SSH jail)
+# 8. NetBird (mesh VPN - klient + setup key)
+# 9. fail2ban (SSH jail)
 #
 # Poznamka: firewall (UFW) se nenastavuje - podle pozadavku uzivatele.
 # Pro produkcni nasazeni doporucujeme nastavit firewall externe
@@ -69,6 +70,8 @@
       tags: [docker]
     - role: adresare
       tags: [adresare, docker]
+    - role: netbird
+      tags: [netbird, vpn]
 
   post_tasks:
     - name: Nainstaluj fail2ban
@@ -110,6 +113,7 @@
 
           SSH pristup: deploy@{{ ansible_host | default(inventory_hostname) }}:{{ ssh_port }}
           Docker: docker --version (bez sudo)
+          NetBird: netbird status (mesh VPN)
           Sluzby: /home/{{ deploy_user }}/docker/<sluzba>/
 
           Dalsi kroky: