README documents the reverse-tunnel use case, features, security model and
usage steps. .gitignore excludes OS/editor cruft and prevents accidental
commit of generated WireGuard configs (which contain private keys).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>