Companion to docs/remote-access.md for Chinese users, per the
contribution shape requested in #7393:
- Tailscale Serve preferred path (loopback + HTTPS MagicDNS), direct
tailnet IP as fallback, SSH tunnel section
- Native Windows deployment via the official start.ps1 launcher with
password auth; firewall rule scoped to the Tailscale CGNAT range
(100.64.0.0/10) instead of an all-interfaces open
- Windows logon auto-start via the official
scripts/windows/setup_webui_autostart.ps1 scheduled-task helper
- Explicit security boundary section distinguishing tailnet-private,
LAN, and public exposure
- No machine-specific usernames/drives/model choices/popularity numbers
- Linked from the README docs index
Tests: test_readme_compat_section, test_issue3012_3006_docker_docs,
test_nix_flake_module_source all pass (17/17).
