Deploy bundle for localterm (browser-tab-as-shell terminal) behind Tailscale Serve with an identity gate, as a persistent macOS LaunchAgent.